Re: ipfw core dump

From: Neo-Vortex (root_at_Neo-Vortex.Ath.Cx)
Date: 08/27/04

  • Next message: Ng Pheng Siong: "Re: ipfw core dump" 
    Date: Fri, 27 Aug 2004 21:51:04 +1000 (EST)
To: Anton Alin-Adrian <aanton@spintech.ro>

    On Fri, 27 Aug 2004, Anton Alin-Adrian wrote:

    > Neo-Vortex wrote:
    > > On Fri, 27 Aug 2004, Anton Alin-Adrian wrote:
    > >
    > >
    > >>Yes, it would be nice if you could also attach the ipfw.core file.
    > >
    > >
    > > he he, you think hes stupid? core files can contain sensative
    > > information... also it would be pointless unless we had the exact same
    > > binary as he had with the same libraries (well, not entirely pointless,
    > > but easier for him to do it :P)
    > >
    > >
    >
    > No i was not thinking of anything unethical. He could have inspected the
    > .core file before sending it.
    Yes, but say he didnt... and not neccessairly you, but anyone who is
    subscribed to these forums...

    >
    > However, I doubt an ipfw core file would contain sensitive information
    > (like passwords and etc). What could it contain, the ACL? The ACL is not
    > secret and who cares anyway?
    if it is indeed backdoor'd who knows what it could be accessing at the
    time?

    >
    > I'm just interested in possible firewall bugs.
    yes, but it would be easier to get him to load up gdb and do a backtrace
    on it as for the whole same version of file and libraries thing...

    >
    > Yours,
    > --
    > Alin-Adrian Anton
    > Spintech Systems
    > GPG keyID 0x1E2FFF2E (2963 0C11 1AF1 96F6 0030 6EE9 D323 639D 1E2F FF2E)
    > gpg --keyserver pgp.mit.edu --recv-keys 1E2FFF2E
    > _______________________________________________
    > freebsd-security@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-security
    > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
    >
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Ng Pheng Siong: "Re: ipfw core dump"