2003-06-12 15:10:44

by Martin Zwickel

[permalink] [raw]
Subject: [QUESTION] What about EtherLeak report from @stake

Hi there!

What do you think about this:

http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf
http://www.kb.cert.org/vuls/id/412115

Are those padding bug's fixed in >=2.5.x/2.4.21?

Or isn't it that critical?

Regards,
Martin

--
MyExcuse:
spaghetti cable cause packet failure

Martin Zwickel <[email protected]>
Research & Development

TechnoTrend AG <http://www.technotrend.de>


Attachments:
(No filename) (189.00 B)

2003-06-12 15:30:27

by Andre Tomt

[permalink] [raw]
Subject: Re: [QUESTION] What about EtherLeak report from @stake

On Thu, 2003-06-12 at 17:24, Martin Zwickel wrote:
> Hi there!
>
> What do you think about this:
>
> http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf
> http://www.kb.cert.org/vuls/id/412115
>
> Are those padding bug's fixed in >=2.5.x/2.4.21?
>
> Or isn't it that critical?


It was fixed in 2.4.x early 2.4.21-pre, and in 2.2.2x sometime I dont
really recall. It's also fixed in 2.5.x, according to linux.bkbits.net.

Most vendor kernels are fixed, too.

--
Cheers,
Andr? Tomt

2003-06-12 15:48:17

by John Bradford

[permalink] [raw]
Subject: Re: [QUESTION] What about EtherLeak report from @stake

> Are those padding bug's fixed in >=2.5.x/2.4.21?

I think fixes for most, if not all drivers were in mainline by 2.4.21-pre5.

John.