Re: UFS Bug: FreeBSD 6.1/6.2/7.0: MOKB-08-11-2006, CVE-2006-5824, MOKB-03-11-2006, CVE-2006-5679

2006-11-24 Thread Lutz Boehne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [It's just a panic] I was so transfixed on Josh stating that the attacker could as well just mount a filesystem with suid root binaries and how that would be more useful than a buffer overflow in the filesystem driver. I totally missed the fact that we

Re: UFS Bug: FreeBSD 6.1/6.2/7.0: MOKB-08-11-2006, CVE-2006-5824, MOKB-03-11-2006, CVE-2006-5679

2006-11-24 Thread Bill Moran
On Fri, 24 Nov 2006 21:41:11 +0100 Erik Trulsson <[EMAIL PROTECTED]> wrote: > On Fri, Nov 24, 2006 at 03:15:43PM -0500, Bill Moran wrote: > > On Fri, 24 Nov 2006 21:04:30 +0100 > > Lutz Boehne <[EMAIL PROTECTED]> wrote: > > > > > -BEGIN PGP SIGNED MESSAGE- > > > Hash: SHA1 > > > > > > >

Re: UFS Bug: FreeBSD 6.1/6.2/7.0: MOKB-08-11-2006, CVE-2006-5824, MOKB-03-11-2006, CVE-2006-5679

2006-11-24 Thread Erik Trulsson
On Fri, Nov 24, 2006 at 03:15:43PM -0500, Bill Moran wrote: > On Fri, 24 Nov 2006 21:04:30 +0100 > Lutz Boehne <[EMAIL PROTECTED]> wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > > Out of the box you need to be root to mount things. Once you have > > > root access to a bo

Re: UFS Bug: FreeBSD 6.1/6.2/7.0: MOKB-08-11-2006, CVE-2006-5824, MOKB-03-11-2006, CVE-2006-5679

2006-11-24 Thread Bill Moran
On Fri, 24 Nov 2006 21:04:30 +0100 Lutz Boehne <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Out of the box you need to be root to mount things. Once you have > > root access to a box you don't need silly things like this to crash > > it. > > > > If you've

Re: UFS Bug: FreeBSD 6.1/6.2/7.0: MOKB-08-11-2006, CVE-2006-5824, MOKB-03-11-2006, CVE-2006-5679

2006-11-24 Thread Lutz Boehne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Out of the box you need to be root to mount things. Once you have > root access to a box you don't need silly things like this to crash > it. > > If you've gone out of your way to configure your box in such a way > that a non-root user can mount

Re: which windows software can communicate with ipsec(racoon)?

2006-11-24 Thread Eric Masson
"Zhao Tongyi" <[EMAIL PROTECTED]> writes: Hi, > I have tested cisco vpn software,found build the phase ONE successfully,but > phase two can't build up. Probably a setup problem, I've been able to setup l2tp/ipsec tunnels between an XP box and a FreeBSD 6.1-RELEASE box (ipsec-tools racoon-0.6.x)

Re: which windows software can communicate with ipsec(racoon)?

2006-11-24 Thread Lupe Christoph
On Friday, 2006-11-24 at 11:44:37 +0200, Jordan Ostreff wrote: > Cisco VPN uses by default udp communication not TCP - maybe this is > related to your problem. IPSec normally uses AH and ESP which are protocols in the same layer as UDP and TCP. The protocol numbers are 51 and 50. If a firewall bl

Re: which windows software can communicate with ipsec(racoon)?

2006-11-24 Thread Jordan Ostreff
Cisco VPN uses by default udp communication not TCP - maybe this is related to your problem. Nikolay Mirin wrote: You don't need extra software for 2000&XP. Just define IPSec policies properly. Zhao Tongyi said the following on 20.11.2006 1:17: I have tested cisco vpn software,found build the