full-disclosure - Re: Linux kernel IGMP vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: stephen.butler at gmail.com (stephen joseph butler)
Subject: Re: Linux kernel IGMP vulnerabilities

On Tue, 14 Dec 2004 11:31:21 +0100 (CET), Paul Starzetz <ihaquer@...c.pl> wrote:
> You can check if your configuration is vulnerable by  looking  at  these
> files:
> 
> /proc/net/igmp
> /proc/net/mcfilter
> 
> if both exist and are non-empty you are vulnerable!

Just to be clear: if "mcfilter" is empty, then you aren't vulnerable?
I have both files, and "igmp" contains data, but "mcfilter" is empty.