On Tuesday 02 December 2003 10:28 pm, Paul G Rogers wrote: > The vulnerability can only be exploited by someone who has already been > given a user account on the Linux machine, and does not affect users of > every Linux system, said Linux creator Linus Torvalds in an e-mail > interview. > > "It's a local-only compromise that you can't trigger from the outside," > he said. "To most people, it would thus become serious only after you > had some account hacked into--the bug then allows elevation of > privileges."
The only account (by default) is 'root', which means that LEAF-Bering isn't (default) affected by this particular compromise.... unless you've added some users that allowed to login to the LEAF box. If they can login under 'root', the compromise wouldn't need to be used..... -- ~Lynn Avants Linux Embedded Appliance Firewall Developer http://leaf.sourceforge.net http://guitarlynn.homelinux.org:81 ------------------------------------------------------- This SF.net email is sponsored by OSDN's Audience Survey. Help shape OSDN's sites and tell us what you think. Take this five minute survey and you could win a $250 Gift Certificate. http://www.wrgsurveys.com/2003/osdntech03.php?site=8 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
