full-disclosure - RE: 7350reass - alleged *BSD remote kernel exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20021022190834.B18348@dw>
From: full-disclosure at botanicus.net (Dave M. Wilson)
Subject: RE: 7350reass - alleged *BSD remote kernel exploit

On Tue, Oct 22, 2002 at 07:32:42PM +0200, Janusz Niewiadomski wrote:

> Yet another, not interesting trojan horse which you probably don't
> want to run. One minute analysis is available at:
> http://isec.pl/funkysh/trash/ for those who interested.

Thanks for that. I had straced it half-heartidly inside a chroot to see
what would happen, and it SEGV'd. At least I now know it was worth
covering my back :).

I notice you have a 'plaintext' copy of the binary -- is there a no-fuss
method for decrypting burneye binaries? Thanks,

Dave.