Tom Samplonius wrote:
----- O. Hartmann <[EMAIL PROTECTED]> wrote:
Is for these UFS bugs in FreeBSD since 6.1 a fix uderway?

See:

http://projects.info-pull.com/mokb/

MOKB-08-11-2006,CVE-2006-5824, MOKB-03-11-2006,CVE-2006-5679


  Probably not.  In both cases a "crafted filesystem" is mounted to trigger 
crash.  Garbage in, garbage out.

  It is hardly exploitable, since only root can mount filesystems.  And only root could 
"craft" a bogus filesystem to crash the kernel.  If you are root, "reboot" is a 
far faster way to crash the system.

  What the MOKB people seem to leave out, is:  do their "crafted filesystems" pass a "fsck -f"?  If fsck says the 
filesystem is good, then the kernel should not crash.  But I suspect that "fsck -f" would fix the filesystem.  (BTW, 
"-f" is mandatory as I suspect that these "crafted filesystems" would have the clean flag set).  If "fsck -f" 
fixes the filesystem, then both of these bugs are bogus.

Tom


Hello Tom.
Thanks for this information. I recently saw this in MOKB and today, I read about that again the the very wide spread news ticker from the German IT magazine c't (look at http://www.heise.de/newsticker/meldung/81454, but it is in German ).

From my point of view, this self-claimed 'neutral' magazine and its news can hardly vanish their Linux affinity.

Regards,
Oliver
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to