Which can be exploited remotely if someone were to find/guess the  
password of a user on that machine and log in.  Though it's not for  
that OS distro anyway.

Dan

On Feb 11, 2008, at 10:12 AM, Robert Citek wrote:

On Feb 11, 2008 10:02 AM, adelmand <[EMAIL PROTECTED]> wrote:
> Asterisk machine runs CentOS.  I could also set up iptables to refuse/
> ignore all packets that aren't from the local network.  If I admin it
> remotely I use SSH tunnels (I think we all do for remote access to
> the shop, no?) so there would be no impact there.

It's a local exploit.  It's only a concern if a remote user can log in
to the box as a local user.

Regards,
- Robert



Yahoo! Groups Links




Reply via email to