Steven Murdoch wrote:
> At 00:02 30/03/01 +0100, you wrote:
>
>
>> This sounds like it:
>>
>> http://www.securityfocus.com/frames/?content=/vdb/bottom.html%3Fvid%3D1078
>
> Thanks, but this wasn't the one I was thinking of. The one Lawrence described
>allowed any user who could get a shell could also get a root shell with little extra
>effort.
>
> Steven.
http://www.securityfocus.com/archive/1/171708
The sploit is fixed in 2.2.19
http://www.linuxsecurity.com/advisories/other_advisory-1243.html
If you are using lvm or raidtools, these also need to be upgraded.
cheers
Lawrence
--------------------------------------------------------------------
http://www.lug.org.uk http://www.linuxportal.co.uk
http://www.linuxjob.co.uk http://www.linuxshop.co.uk
--------------------------------------------------------------------