[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DJB's students release 44 *nix software vulnerability advisories

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: DJB's students release 44 *nix software vulnerability advisories
From: "milw0rm Inc." <milw0rm@xxxxxxxxx>
Date: Tue, 21 Dec 2004 14:34:20 -0600

/* 
Two points.
Regarding local versus remote, look at it this way:  You have a 100%
secure system.  Then you install NASM.  Now a user FROM THE NETWORK can
send you some tainted assembly code for you to assemble and he can
compromise your account.
*/ 

quote "for you to assemble"

Its a user error.  Your not remotely exploiting anything but the trust
from the user.

//str0ke

Follow-Ups:
- Re: DJB's students release 44 *nix software vulnerability advisories
  - From: Antoine Martin
- Re: DJB's students release 44 *nix software vulnerability advisories
  - From: Jack Lloyd

References:
- Re: DJB's students release 44 *nix software vulnerability advisories
  - From: Jonathan T Rockway

Prev by Date: Re: DJB's students release 44 *nix software vulnerability advisories
Next by Date: Re: DJB's students release 44 *nix software vulnerability advisories
Previous by thread: Re: DJB's students release 44 *nix software vulnerability advisories
Next by thread: Re: DJB's students release 44 *nix software vulnerability advisories
Index(es):
- Date
- Thread