bugtraq - Re: Linux kernel IGMP vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 14 Dec 2004 23:14:46 -0600
From: stephen joseph butler <stephen.butler@...il.com>
To: security@...c.pl
Cc: bugtraq@...urityfocus.com, vulnwatch@...nwatch.org,
	full-disclosure@...ts.netsys.com
Subject: Re: Linux kernel IGMP vulnerabilities


On Tue, 14 Dec 2004 11:31:21 +0100 (CET), Paul Starzetz <ihaquer@...c.pl> wrote:
> You can check if your configuration is vulnerable by  looking  at  these
> files:
> 
> /proc/net/igmp
> /proc/net/mcfilter
> 
> if both exist and are non-empty you are vulnerable!

Just to be clear: if "mcfilter" is empty, then you aren't vulnerable?
I have both files, and "igmp" contains data, but "mcfilter" is empty.