Date: Tue, 28 Apr 2009 17:07:29 +0300
From: Gadi Evron <ge@linuxbox.org.>
To: funsec <funsec@linuxbox.org.>,
Subject: one shot remote root for linux?
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeded SMTP AUTH authentication, not delayed by milter-greylist-1.7.5 (linuxbox.org [24.155.83.21]); Tue, 28 Apr 2009 09:09:39 -0500 (CDT)
X-Virus-Scanned: antivirus-gw at tyumen.ru
Sometimes news finds us in mysterious yet obvious ways.
HD set a status which I noticed on my twitter:
@hdmoore reading through sctp_houdini.c - one-shot remote linux kernel
root - http://kernelbof.blogspot.com/
I asked him about it on IM, wondering if it is real:
"looks like that
but requires a sctp app to be running"
Naturally, I retweeted.
Signed,
@gadievron