[5542] in bugtraq

home	help	back	first	fref	pref	prev	next	nref	lref	last	post

Re: Intel Pentium Bug

daemon@ATHENA.MIT.EDU (Jason Parsons)
Mon Nov 10 01:50:19 1997

Date: 	Sun, 9 Nov 1997 19:39:10 -0500
Reply-To: Jason Parsons <root@SAFFRONCS.COM>
From: Jason Parsons <root@SAFFRONCS.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <Pine.SUN.3.94.971108184826.10652A-100000@dfw.dfw.net>

Re the F0 0F C7 C8 Pentuim bug:

I just wanted ot repost this from the Linux-security list.  Thought it
might be helpful to some here.  This was posted to Linux-security by Sam
Trenholme <set@reality.samiam.org>.

#!/usr/bin/perl

# There is no known software fix to the F0 0F C7 C8 bug at this time

# usage: finddeath dir

# where dir is the directory you recursively look at all programs in
# for instances of the F0 0F C7 C8 sequence

# This script will search for programs with this sequence, which will
# help sysadmins take appropriate action against those running such
# programs

# This script is written (but has not been tested) in Perl4, to
# insure maximum compatibility

sub findit {
  local($dir,$file,@files,$data) = @_;

  undef $/;

  if(!opendir(DIR,$dir)) {
    print STDERR "Can not open $dir: $!\n";
    return 0;
    }

  @files=readdir(DIR);

  foreach $file (@files) {
    if($file ne '.' && $file ne '..') {
      if( -f "$dir/$file" && open(FILE,"< $dir/$file")) {
        $data=<FILE>;
        if($data =~ /\xf0\x0f\xc7\xc8/) {
          print "$dir/$file contains F0 0F C7 C8\n";
          }
        } elsif( -d "$dir/$file") {
         &findit("$dir/$file");
        }
      }
    }

  }

$dir = shift || '/home';

&findit($dir);

home	help	back	first	fref	pref	prev	next	nref	lref	last	post