lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20031124025459.GN9377@dijkstra.csh.rit.edu>
Date: Sun, 23 Nov 2003 21:55:00 -0500
From: Matt Zimmerman <mdz@...ian.org>
To: bugtraq@...urityfocus.com
Subject: Re: [aadams@...urityfocus.com: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation]


On Thu, Nov 20, 2003 at 05:10:57PM -0700, David Ahmad wrote:

> As far as I know, this bug was not discussed or exploited anywhere
> publicly.  Also, the technique used to cause the memory copy to
> fail is clever and may be useful in other scenarios.

Perhaps not exploited, but it was definitely discussed.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=2003-0248
http://www.debian.org/security/2003/dsa-311
http://www.debian.org/security/2003/dsa-332
http://www.redhat.com/support/errata/RHSA-2003-187.html
http://www.redhat.com/support/errata/RHSA-2003-195.html
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:066
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:074

-- 
 - mdz


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ