User: JezusPhreak

Re:Facts of Life

On: 2.2.16 Kernel Released - Fixes Security Hole

Actually, to successfully exploit this, you would need to have both 1)an SUID program with a known bug which was exploitable under the conditions of this kernel bug and 2) a kernel obefore rev 2.2.16. This bug does not seem to be exploitable _by itself_.

Facts of Life

On: 2.2.16 Kernel Released - Fixes Security Hole

This is not any worse than many of the security holes found on other operating systems over the past several years. It is necessary, for an actually secure environment, to keep up with newsgroups for any operating system. In many ways, Linux' open source nature makes these types of bugs easier to find, and more likely to be fixed than covered up. Patch up you OS people....

Adjusted scripts

On: New, More Destructive Love Bug Variant

This is a quickie script to straighten out VBA, VBS, and JS attachments. Happy Hacking:

#This goes in procmailrc:
:0 Bf
*!^X-Loop: viruscheck
*^Content-Disposition:.+
|/sbin/noiloveyou | /usr/bin/formail -i "X-Loop:viruscheck"
:0:
$ORGMAIL

#!/usr/bin/perl
#This is "/sbin/noiloveyou"

while() {
$temp=$_;
if ($temp =~ /^content-disposition\:/i) {
print $temp;
$temp = ;
$temp =~ s/\.vbs/_vbs\.txt/i;
$temp =~ s/\.vba/_vba\.txt/i;
$temp =~ s/\.js/_js\.txt/i;
print $temp;
next;
}
if ($temp =~ /^content-type\:/i) {
$temp =~ s/application\/x-javascript/text\/plain; charset\=us-ascii/;
print $temp;
$temp = ;
$temp =~ s/\.vbs/_vbs\.txt/i;
$temp =~ s/\.vba/_vba\.txt/i;
$temp =~ s/\.js/_js\.txt/i;
print $temp;
next;
}
print $temp;
}

#This should at least slow it down a little #bit....
# Jacques Richer -- jricher@bankri.com