OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Cooper (CooperLINUX-FAN.COM)
Date: Mon Apr 02 2001 - 14:31:24 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Strictly speaking, in order to put data on the disk in such a way that
    fsck is needed to correct the problem, you need direct access to the
    disk.
    If you have direct access to the disk, you either have root, or found an
    exploit in the fs code, or found a machine that has brain damaged access
    controls on the harddisk device.
    Assuming you have such access, it's probably a *LOT* easier to modify
    the sector on which the password file is stored. If you simply want to
    DoS, edit /etc/fstab and change the root partition. That only takes 1
    character and I guarantee you that the machine will not come up until
    someone's come over to correct the now-corrupt file.

    Still, all things considered, by the time you've managed to get the
    machine to DoS, you've probably gotten yourself sufficient access on the
    machine to DoS in a lot less restrictive ways.

    In short, I don't think it can be done with the default install of the
    any self respecting UNIX distribution.

    Cooper

    --
    I want a patriot missile.
    I pay taxes, why can't I have one?
    	- Denis Leary, Cheese Helmet -