----- O. Hartmann <[EMAIL PROTECTED]> wrote:
> Is for these UFS bugs in FreeBSD since 6.1 a fix uderway?
> 
> See:
> 
> http://projects.info-pull.com/mokb/
> 
> MOKB-08-11-2006,CVE-2006-5824, MOKB-03-11-2006,CVE-2006-5679
> 

  Probably not.  In both cases a "crafted filesystem" is mounted to trigger 
crash.  Garbage in, garbage out.

  It is hardly exploitable, since only root can mount filesystems.  And only 
root could "craft" a bogus filesystem to crash the kernel.  If you are root, 
"reboot" is a far faster way to crash the system.

  What the MOKB people seem to leave out, is:  do their "crafted filesystems" 
pass a "fsck -f"?  If fsck says the filesystem is good, then the kernel should 
not crash.  But I suspect that "fsck -f" would fix the filesystem.  (BTW, "-f" 
is mandatory as I suspect that these "crafted filesystems" would have the clean 
flag set).  If "fsck -f" fixes the filesystem, then both of these bugs are 
bogus.

Tom
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to