Slashdot Mirror
Domain: rootshell.com
Stories and comments across the archive that link to rootshell.com.
Stories · 6
-
Ssh Confirms Buffer Overflow
-
Rootshell Hacked
rootshell.com was hacked and defaced today by a group of crackers. Apparently they got in using SSH (secure shell). The defaced site has been archived for viewing. Unfortunately, it is still not known exactly how the crackers got in. -
Rootshell Hacked
rootshell.com was hacked and defaced today by a group of crackers. Apparently they got in using SSH (secure shell). The defaced site has been archived for viewing. Unfortunately, it is still not known exactly how the crackers got in. -
Quake 2 security risk
Quake 2 is vulnerable to an attack posted on rootshell.com Zoid says in his .plan:rootshell.com has posted an exploit for Quake2 under Linux. This exploit was talked about on the buqtraq list a day or two ago.
I've known about this one due to loading shared libs. I forgot to specifically mention in the readme that Quake2 should not be setuid. If you want to use the ref_soft and ref_gl renderers, you should run Quake2 as root. Don't make the binary setuid. You can only run both those renderers at the console only, so being root isn't that much of an issue. The X11 render doesn't need any root permissions (if /dev/dsp is writable by others for sound).
The dedicated server mode (+set dedicated 1) doesn't need to be root either.
I will look at solutions to this problem in the next release. Problems such as root requirements for games has been sort of a sore spot in Linux for a number of years now. This is one of the goals that GGI is targetting to fix. I plan on supporting a ref_ggi in the near future.
-
Quake 2 security risk
Quake 2 is vulnerable to an attack posted on rootshell.com Zoid says in his .plan:rootshell.com has posted an exploit for Quake2 under Linux. This exploit was talked about on the buqtraq list a day or two ago.
I've known about this one due to loading shared libs. I forgot to specifically mention in the readme that Quake2 should not be setuid. If you want to use the ref_soft and ref_gl renderers, you should run Quake2 as root. Don't make the binary setuid. You can only run both those renderers at the console only, so being root isn't that much of an issue. The X11 render doesn't need any root permissions (if /dev/dsp is writable by others for sound).
The dedicated server mode (+set dedicated 1) doesn't need to be root either.
I will look at solutions to this problem in the next release. Problems such as root requirements for games has been sort of a sore spot in Linux for a number of years now. This is one of the goals that GGI is targetting to fix. I plan on supporting a ref_ggi in the near future.
-
Teardrop Spinoffs Terrorize
Variations on the now legendary Teardrop security hole are now out. They can trash Patched 95 & NT boxes. No word on other OSs. Jonas 'effe' Munsin sent in this story for anyone who wants to read more.