[37742] in bugtraq
Re: Linux kernel IGMP vulnerabilities
daemon@ATHENA.MIT.EDU (stephen joseph butler)
Wed Dec 15 16:45:14 2004
Message-ID: <f107df204121421146ed7e337@mail.gmail.com>
Date: Tue, 14 Dec 2004 23:14:46 -0600
From: stephen joseph butler <stephen.butler@gmail.com>
Reply-To: stephen joseph butler <stephen.butler@gmail.com>
To: security@isec.pl
Cc: bugtraq@securityfocus.com, vulnwatch@vulnwatch.org,
full-disclosure@lists.netsys.com
In-Reply-To: <Pine.LNX.4.44.0412141125500.1042-100000@isec.pl>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
On Tue, 14 Dec 2004 11:31:21 +0100 (CET), Paul Starzetz <ihaquer@isec.pl> wrote:
> You can check if your configuration is vulnerable by looking at these
> files:
>
> /proc/net/igmp
> /proc/net/mcfilter
>
> if both exist and are non-empty you are vulnerable!
Just to be clear: if "mcfilter" is empty, then you aren't vulnerable?
I have both files, and "igmp" contains data, but "mcfilter" is empty.
