Catch up on stories from the past week (and beyond) at the Slashdot story archive


Forgot your password?

Submission + - Serious Remote FreeBSD Exploit Posted ( 2

Trailrunner7 writes: A researcher has published an explanation of a new flaw in FreeBSD that allows a remote attacker to take control of a vulnerable machine. The vulnerability could give an attacker root access to the FreeBSD machine, and the FreeBSD developers have published a patch for the flaw early Tuesday. The vulnerability lies in run-time link-editor and, if exploited, gives an attacker the ability to run arbitrary code. The researcher, Kingcope, has posted an explanation of the flaw on the Full Disclosure mailing list. In a message to FreeBSD users, Colin Percival, the project's security officer, said that because of the severity of the flaw and the fact that exploit code already is available, he felt it was necessary to post the patch as soon as possible, without even publishing a security advisory.
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Serious Remote FreeBSD Exploit Posted

Comments Filter:

"Anyone attempting to generate random numbers by deterministic means is, of course, living in a state of sin." -- John Von Neumann