Re: OpenBSD Exploit

[Christian Ruediger Bahls <christian () IT-NETSERVICE DE>]

sorry but i couldn't resist to answer

1st of all this isn't a remotely exploitable vulnerability
   -you need a shell-account on the target machine
   -you need physical access to the console to use DDB
    (this isn't a secure system at all.. as you could always
     use a "rescue"-disk to boot the system with your own root-shell)

2nd of all sysctl -w ddb.panic=0 is allways a good choice on a
    production-system

i do understand that there are some hidden vulnerabilities in OpenBSD
but i would appreciate to get this information from OpenBSD .. and most
important: after they fixed it ..

Yours ..

--
Christian Bahls
Networking Dep.
iT-netservice GmbH
Leipzig, Germany