>На странице проблем безопасности ПО опубликовано: 13.04.2004 IPFW ECE Firewall Bypassing Exploit
>
>https://www.opennet.ru/base/fire/1081874283_375.txt.html
>Странно, что на сайте FreeBSD в разделе FreeBSD Security Information ничего нет.
>
Потому что это ботва:
From owner-freebsd-security@freebsd.org Wed Apr 14 13:37:06 2004
Return-path: <owner-freebsd-security@freebsd.org>
Received: from [216.136.204.119] (port=27927 helo=mx2.freebsd.org)
by mx12.mail.ru with esmtp
id 1BDgp7-000JDn-00; Wed, 14 Apr 2004 13:36:49 +0400
Received: from hub.freebsd.org (hub.freebsd.org [216.136.204.18])
by mx2.freebsd.org (Postfix) with ESMTP
id A7D4F57A2B; Wed, 14 Apr 2004 02:35:33 -0700 (PDT)
(envelope-from owner-freebsd-security@freebsd.org)
Received: from hub.freebsd.org (localhost [127.0.0.1])
by hub.freebsd.org (Postfix) with ESMTP
id 5F1FC16A4D4; Wed, 14 Apr 2004 02:35:32 -0700 (PDT)
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id 293E916A4CF
for <freebsd-security@freebsd.org>;
Wed, 14 Apr 2004 02:35:00 -0700 (PDT)
Received: from tx1.oucs.ox.ac.uk (tx1.oucs.ox.ac.uk [129.67.1.167])
by mx1.FreeBSD.org (Postfix) with ESMTP id EB0B943D2D
for <freebsd-security@freebsd.org>;
Wed, 14 Apr 2004 02:34:59 -0700 (PDT)
(envelope-from colin.percival@wadham.ox.ac.uk)
Received: from scan1.oucs.ox.ac.uk ([129.67.1.166] helo=localhost)
by tx1.oucs.ox.ac.uk with esmtp (Exim 4.24)
id 1BDgnK-0002CV-IC
for freebsd-security@freebsd.org; Wed, 14 Apr 2004 10:34:58 +0100
Received: from rx1.oucs.ox.ac.uk ([129.67.1.165])
by localhost (scan1.oucs.ox.ac.uk [129.67.1.166]) (amavisd-new, port 25)
with ESMTP id 08075-09 for <freebsd-security@freebsd.org>;
Wed, 14 Apr 2004 10:34:58 +0100 (BST)
Received: from gateway.wadham.ox.ac.uk ([163.1.161.253])
by rx1.oucs.ox.ac.uk with smtp (Exim 4.24)
id 1BDgnK-0002CS-4p
for freebsd-security@freebsd.org; Wed, 14 Apr 2004 10:34:58 +0100
Received: (qmail 5515 invoked by uid 1004); 14 Apr 2004 09:34:58 -0000
Received: from colin.percival@wadham.ox.ac.uk by gateway by uid 71 with
qmail-scanner-1.20
(clamscan: 0.67. sweep: 2.18/3.79. Clear:RC:1(163.1.161.131):.
Processed in 0.135248 secs); 14 Apr 2004 09:34:58 -0000
Received: from dhcp1131.wadham.ox.ac.uk (HELO piii600.wadham.ox.ac.uk)
(163.1.161.131)
by gateway.wadham.ox.ac.uk with SMTP; 14 Apr 2004 09:34:58 -0000
Message-Id: <6.0.1.1.1.20040414102727.03ad0008@imap.sfu.ca>
X-Sender: cperciva@imap.sfu.ca (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 6.0.1.1
Date: Wed, 14 Apr 2004 10:34:55 +0100
To: freebsd-security@freebsd.org
From: Colin Percival <colin.percival@wadham.ox.ac.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Cc: freebsd-ipfw@freebsd.org
Subject: FYI re: "FreeBSD ECE flag ipfw protection bypass"
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
Sender: owner-freebsd-security@freebsd.org
Errors-To: owner-freebsd-security@freebsd.org
X-Spam: Not detected
Several people have noticed that SecuriTeam.com is reporting a
"FreeBSD ECE flag ipfw protection bypass" exploit. In an effort
to save time, let me say this publicly: SecuriTeam.com is three
years out of date.
This problem was fixed in FreeBSD 3.5-STABLE and 4.2-STABLE in
January 2001, and reported in Security Advisory FreeBSD-SA-01:08.
Colin Percival
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
Вариант для распечатки
OpenNET: Виртуальная конференция (Public)
(ok) on
15-Апр-04, 12:23 (MSK)
