[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] Vulnerability in Gentoo hardened



El 24/04/12 14:41, Григорий Братислава escribió:
> Is good evening.
Is good afternoon.
>  I is would like to warn you about is vulnerability in
> Backtrack is all version.
I is want to advise you on one failure in Gentoo Hardened at all types
> Backtrack Linux is penetration tester is system. Is come complete with
> tool for to make hacking for penetration tester.
Gentoo Hardened is advanced security is system. Is come complete with
hardened nucleum for to make at system is securer
> In is booting Backtrack, vulnerability exist in booting for when start
> if attacker is edit grub, attacker can bypass restricted user and is
> boot into admin account. E.g.:
In is making Gentoo Hardened, failure exist in sysadmin at when usage if
attacker is rubber hose, attacker can override authentication and is
make admin account. Making simple program. E.g.:
1. Apply rubber hose for sysadmin
2. Ask at password and try it.
3. If error make 1.

> I is will make this into video for bypassing security in Backtrack for
> to post on InfoSecInstitute
I is will be this for video by bypassing security at Gentoo Hardened or
to post by Youtube. I is named "Reservoir Dogs".

PD: Bad English written on purpose, please forgive me for any correct
grammar I may have used :P
PD2: Григорий seeing your historial I think the mail was a joke but
anyway, just in the improbable case it may not be:
  1. Bad administration issues are not global to a distro issues.
  2. Make sure a vulnerability is not a not so secure by design feature.
  3. Really if you ever want to write a paper or something make sure you
get it readen by at least two or three english speaking partners for
your own sake.

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/