[20471] in bugtraq
Re: x86 vulnerability
daemon@ATHENA.MIT.EDU (Florian Weimer)
Thu Apr 26 19:56:25 2001
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-ID: <tgd79zok0y.fsf@mercury.rus.uni-stuttgart.de>
Date: Thu, 26 Apr 2001 15:41:49 +0200
Reply-To: Florian Weimer <Florian.Weimer@RUS.UNI-STUTTGART.DE>
From: Florian Weimer <Florian.Weimer@RUS.UNI-STUTTGART.DE>
X-To: johncybpk@GMX.NET
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <9964.988184044@www55.gmx.net> (Johnny Cyberpunk *'s message of
"Wed, 25 Apr 2001 09:34:04 +0200")
Johnny Cyberpunk * <johncybpk@GMX.NET> writes:
> The LSD Team has found this bug in the ARGUS System. Know since January
> 2001, found by a NETBSD-Team and fixed very earlier than SUN has.
> SUN fixed it primal on 17.04.2001 and ARGUS hasn't patched it.
Has anybody looked at the LDT modification syscall in the Linux
kernel? The most severe problems with it were fixed back in 1997 or
so, but the code seems to have changed substantially since then.
--
Florian Weimer Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart http://cert.uni-stuttgart.de/
RUS-CERT +49-711-685-5973/fax +49-711-685-5898