Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: No shell => secure?
From: Matthias Benkmann <matthias () winterdrache de>
Date: Fri, 9 Jul 2004 22:41:59 +0200

Since everybody seems to insist on misunderstanding me I'll try another
approach:

There have been several Linux worms in the past. One of them is
Linux.Slapper. Would my path-renaming scheme have prevented my system from
getting infected?

http://securityresponse.symantec.com/avcenter/venc/data/linux.slapper.worm.html

says:"This code requires the presence of the shell command /bin/sh to
properly execute."

So the answer is "Yes, the path-renaming scheme would have protected my
system against infection from Linux.Slapper."

So I have one example to back up my claim. Now it's your turn. Give me a
worm that my scheme would not have protected me against. That's all you
need to do to convince me. Easy, isn't it? No need to give me lengthy
lectures. Just give me one URL. If you can't do that, don't bother
replying. You're wasting your time, because you're telling me things I
already know.

MSB

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]