New Linux Kernel Crash-Exploit Discovered

Comments

1. 
   14 Jun 2004 ~ 5:58pm Straight_Man Nice thing is, there are patches for the "evil" vuln for those who can patch kernels or know how to rebuild them. Same site. Gentoo (certain kernels) and User-mode Linux seem best off in this regard.
   
   For SHELL servers this is a PITA, for workstation Linux boxes or single-purpose servers it is less so, the vuln requires that a file be uploaded to box being attacked and that user be able to run said file on remote box-- need not be root, must be able to run file. Most experienced sysadmins do not allow remote run authority and upload authority to anywhere near most people. Limit authority to run only what is on box already, allow uploads via sftp only, and vet what is made runnable.