Re: [ronvdaal@zarathustra.linux666.com: Possible security issue with FreeBSD 5.4 jailing and BPF]
From: Simon L. Nielsen (simon_at_FreeBSD.org)
Date: 07/14/05
- Previous message: Avleen Vig: "[ronvdaal@zarathustra.linux666.com: Possible security issue with FreeBSD 5.4 jailing and BPF]"
- In reply to: Avleen Vig: "[ronvdaal@zarathustra.linux666.com: Possible security issue with FreeBSD 5.4 jailing and BPF]"
- Next in thread: Ricardo A Reis: "Re: [ronvdaal@zarathustra.linux666.com: Possible security issue with FreeBSD 5.4 jailing and BPF]"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 14 Jul 2005 18:52:51 +0200 To: Avleen Vig <lists-freebsd@silverwraith.com>
On 2005.07.14 09:26:56 -0700, Avleen Vig wrote:
> This message was sent to bugtraq today:
Please see the thread on full-disclosure as to why this is not an
issue.
http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035036.html
Unfortunately the poster sent separate mails to full-disclosure and
bugtraq, so the followups where only set to full-disclosure (since we
saw the mail first there).
> While playing around with FreeBSD 5.4 and jailing I discovered that it was
> possible to put an ethernet interface into promiscious mode from within the
> jailed environment, allowing a packetsniffer to gather data not meant for
> the jailed box. This also affects FreeBSD 5.3 (tested) but not FreeBSD 4.x
> This can be reproduced on boxes where BPF support is enabled in the kernel
> and a BPF device is available in the jail (badly configured devfs/no rules)
[...]
-- Simon L. Nielsen
- application/pgp-signature attachment: stored
- Previous message: Avleen Vig: "[ronvdaal@zarathustra.linux666.com: Possible security issue with FreeBSD 5.4 jailing and BPF]"
- In reply to: Avleen Vig: "[ronvdaal@zarathustra.linux666.com: Possible security issue with FreeBSD 5.4 jailing and BPF]"
- Next in thread: Ricardo A Reis: "Re: [ronvdaal@zarathustra.linux666.com: Possible security issue with FreeBSD 5.4 jailing and BPF]"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
