Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-Disclosure] Automated ssh scanning

Subject: Re: [Full-Disclosure] Automated ssh scanning
Date: Thu, 26 Aug 2004 23:24:31 +0200
On Thu, 2004-08-26 at 09:15, Richard Verwayen wrote:
Uhm. How do you mean, "fully patched"? What kernel were you running?
Hello Henrik

I am relying on the debian software distribution system, so it was there
latest stable kernel-source for woody. So it was the latest debianised
2.4.19. Shouldn't I believe it secured against these exploits?

Well, you should, I guess.

I could grab all the kits (I think) from the net and I went trough
them.. do_mremap and brk and whatnot.. Can anyone else confirm that the
latest stable debian woody kernel (package from security.debian.org repo
I guess) is vulnerable?

Or can you, Richard, go trough the exploits and try to root your box?

I'm away from home and I only have my lappie here with linux 2.6.8.1.
And the exploits I tried didn't work here. :)

-- 
Henrik Persson <nix@syndicalist.net>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

<Prev in Thread] Current Thread [Next in Thread>