| Remote root on Linux 2.6.x? |
|
|
|
| Wednesday, 29 November 2006 | |||||
 A US based IT Security company known as Digital Armaments Inc ., launched an hacking challenge on the topic “Remote Kernel” that started on November 1st and will end on December 31st when the prizes will be given on the basis of the publication of an official advisory reporting the identified vulnerabilities. This Advisory will be then sold in an auction.It could have been just another race among the variety of similar races that every year are announced on the Internet, but according to the organizers, during the race it was discovered an important vulnerability that it is worth the IT Community attention. Actually, the official rules forbid to disclose any infomation before the end of the challenge, so it was spread out just a short announce about a vulnerability on Linux 2.6.x. Is that the truth? Is the identified vulnerability so important or is it just a promotional initiative? Some distrust is quite obvious in this case.. On November 16th, indeed, a message was published on the homepage of Digital Armaments’ website, announcing that it has been identified a remote root vulnerability on Linux 2.6.x. “EXCLUSIVE Linux Kernel 2.6.x unpatched remote exploit is available at auction to the Platinum Subscription”, the message says. But unfortunately, no other information was revealed. This kind of vulnerability is very critical and extremely rare, because the Linux core was audited by thousands of professionals in computer security. We know just that this vulnerability concerns IPV4 and IPV6 stacks in the Linux kernel, and that it can cause a remote code execution. Will it be the truth or will it be a form of “advertising” aimed to attract as many people as possible to the final auction.. we have to wait until December 31st to learn something more about that.
Powered by a Zone-H(ified) version of AkoComment 3.0! DISCLAIMER: Forum postings are the opinion of the posting author alone, and should not be taken as the opinion of Zone-h. The author is entirely and solely responsible for all content that he/she uploads, posts, or otherwise transmits via the website. Zone-h is not responsible for such content. However, Zone-h shall have the right, but not the obligation, to delete, move, or edit any content that violates this agreement or is otherwise objectionable as determined by Zone-h in its sole discretion and without notice. |
|||||
| < Prev | Next > |
|---|
