Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) [rootshell] Security Bulletin #16 (fwd)



On Tue, 17 Mar 1998, Phillip Vandry wrote:

| Well, I tried this on a Pipeline, and the Pipe seemed unaffected. So,
| noticing that the code does not set a valid UDP checksum, I turned off
| UDP checksums on the Pipeline and tried it again. Still no effect.  So I
| tried it on a Max 4048. Still no effect. 

It should work.  I will privately send you a binary.  I will also be
releasing a Java version of the exploit today for all of the non-linux
folks.

| Has anyone been able to use this attack successfully?

Yes.

--

Kit Knox [kit@connectnet.com] - CONNECTnet INS, Inc.


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


References: