Re: Any Protection against the Phrack 55-5 hack ?

Exchange (paulleEXCHANGE.MICROSOFT.COM)
Fri, 1 Oct 1999 12:20:53 -0700

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Russ: "Alert: Microsoft Security Bulletin (MS99-040) - IE 5.0 Download B ehavior"
• Previous message: Russ: "FYI: Spamcop detained your email"
• Next in thread: Adam Shostack: "Re: Any Protection against the Phrack 55-5 hack ?"
• Next in thread: Matthew Mucker: "Re: Any Protection against the Phrack 55-5 hack ?"
• Reply: Adam Shostack: "Re: Any Protection against the Phrack 55-5 hack ?"
• Reply: Michael Siwinski: "Re: Any Protection against the Phrack 55-5 hack ?"

Don't give people admin access or physical access to the machine, so that
they can't patch the kernel.

Every kernel I have ever known has had a place in the access checking module
that had an instruction sequence like
        BNE NoAccess
(or moral equivalent) that could be patched out to allow anyone access to
anything.

> -----Original Message-----
> From: AS [mailto:asFUI.UNI-ERLANGEN.DE]
> Sent: Wednesday, September 29, 1999 11:35 PM
> To: NTBUGTRAQLISTSERV.NTBUGTRAQ.COM
> Subject: Any Protection against the Phrack 55-5 hack ?
>
>
> I haven't seen anything about it here by now ?
>
> http://www.phrack.com/search.phtml?view&article=p55-5
>
> Greetings
> TS
>

• Next message: Russ: "Alert: Microsoft Security Bulletin (MS99-040) - IE 5.0 Download B ehavior"
• Previous message: Russ: "FYI: Spamcop detained your email"
• Next in thread: Adam Shostack: "Re: Any Protection against the Phrack 55-5 hack ?"
• Next in thread: Matthew Mucker: "Re: Any Protection against the Phrack 55-5 hack ?"
• Reply: Adam Shostack: "Re: Any Protection against the Phrack 55-5 hack ?"
• Reply: Michael Siwinski: "Re: Any Protection against the Phrack 55-5 hack ?"

This archive was generated by hypermail 2.0b3 on Fri Oct 01 1999 - 15:20:01 CDT