full-disclosure - Debian Development Machine "Gluck" Hacked -UPDATE

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BAY19-DAV896DC26753705A4066653D96E0@phx.gbl>
Date: Thu Jul 13 23:05:05 2006
From: se_cur_ity at hotmail.com (Morning Wood)
Subject: Debian Development Machine "Gluck" Hacked
	-UPDATE


> David Taylor wrote:
> Curious why Secunia is rating this as 'less critical'.  The way I see it,
> this exploit could be integrated into the other exploits for mambo, 
> joomla,
> phpbb, etc.  Also, all of us that have websites hosted on linux machines
> that have a vulnerable kernel could get root?
>
> I'm thinking 'highly critical'?

considering the widespread use of that kernel,
 yes

and yes, viable user=>root exploit can be obtained from a web app vuln. ( 
hacking 101 here kids )