[34102] in bugtraq
Announcing full functional adore-ng rootkit for 2.6 Kernel
daemon@ATHENA.MIT.EDU (stealth)
Thu Mar 11 13:24:51 2004
Date: Thu, 11 Mar 2004 10:27:00 +0000
From: stealth <stealth@segfault.net>
To: bugtraq@securityfocus.com
Message-ID: <20040311102700.GB16846@segfault.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Hi,
At http://stealth.7350.org/rootkits/adore-ng-0.41.tgz you find
the complete port of adore-ng for the Linux kernel 2.6. All
of the stuff you know from earlier kernel 2.4 versions such
as socket-, process- and file-hiding, syslog- and [uw]tmp filtering
has been ported. Additionally since version 0.32 a buffer overflow has
been fixed (doh!) which could lead to crashes when a lot of network
connections exist.
regards,
stealth-