[20471] in bugtraq

home help back first fref pref prev next nref lref last post

Re: x86 vulnerability

daemon@ATHENA.MIT.EDU (Florian Weimer)
Thu Apr 26 19:56:25 2001

MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-ID:  <tgd79zok0y.fsf@mercury.rus.uni-stuttgart.de>
Date:         Thu, 26 Apr 2001 15:41:49 +0200
Reply-To: Florian Weimer <Florian.Weimer@RUS.UNI-STUTTGART.DE>
From: Florian Weimer <Florian.Weimer@RUS.UNI-STUTTGART.DE>
X-To:         johncybpk@GMX.NET
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To:  <9964.988184044@www55.gmx.net> (Johnny Cyberpunk *'s message of
              "Wed, 25 Apr 2001 09:34:04 +0200")

Johnny Cyberpunk * <johncybpk@GMX.NET> writes:

> The LSD Team has found this bug in the ARGUS System. Know since January
> 2001, found by a NETBSD-Team and fixed very earlier than SUN has.
> SUN fixed it primal on 17.04.2001 and ARGUS hasn't patched it.

Has anybody looked at the LDT modification syscall in the Linux
kernel?  The most severe problems with it were fixed back in 1997 or
so, but the code seems to have changed substantially since then.

--
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898

home help back first fref pref prev next nref lref last post