Re: FreeBSD 4.3 local root

From: Chris Byrnes (chris@jeah.net)
Date: 07/12/01


Date: Thu, 12 Jul 2001 15:52:24 -0500 (CDT)
From: Chris Byrnes <chris@jeah.net>
To: Mike Tancsa <mike@sentex.net>

On Thu, 12 Jul 2001, Mike Tancsa wrote:

> At 03:13 PM 7/12/01 -0500, jamie rishaw wrote:
> >Patch your systems. Maintain security.
>
> I guess what some people want to do is to make sure the patch worked. i.e.
> test before and after.
>
> >Dont add untrusted users.
>
> Not always possible.... e.g. an ISP shell server.

Indeed. I had a user today try and use the exploit. Too bad for him that
we upgraded to the latest -stable last night.

It's an unfortunate world we live in.

Chris Byrnes, Managing Member
JEAH Communications, LLC

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages