Re: Remote Root In Nvidia xserver Driver

2006-10-18 Thread Matvey Gladkikh
On Wed, Oct 18, 2006 at 05:55:00AM +0400, Noah Meyerhans wrote: On Wed, Oct 18, 2006 at 02:11:24AM +0100, paddy wrote: NB: although some are saying this is a local root exploit only, the bulletin points out it can be exploited by visiting a malicious webpage. I've not scrutinised

Re: help: duplicate MAC address

2006-10-18 Thread martin f krafft
also sprach Lestat V [EMAIL PROTECTED] [2006.10.18.0509 +0200]: Can it be normal? Or what may be going on my computer and the LAN? Yes, this can happen. I suggest you use the ifupdown pre-up hook to change them on each machine. iface eth0 inet dhcp pre-up ip link set $IFACE address

Re: help: duplicate MAC address

2006-10-18 Thread Lestat V
Thanx. I am not quite sure about what you mean. However, the HAddress as indicated by the ifconfig -a is 00:11:2F:57:9B:6F, which is not the one as indicated in the ARP cache in other machine. On 10/18/06, martin f krafft [EMAIL PROTECTED] wrote: also sprach Lestat V [EMAIL PROTECTED]

Re: help: duplicate MAC address

2006-10-18 Thread martin f krafft
also sprach Lestat V [EMAIL PROTECTED] [2006.10.18.1115 +0200]: Thanx. I am not quite sure about what you mean. However, the HAddress as indicated by the ifconfig -a is 00:11:2F:57:9B:6F, which is not the one as indicated in the ARP cache in other machine. in that case you may just have a

Re: help: duplicate MAC address

2006-10-18 Thread Goswin von Brederlow
martin f krafft [EMAIL PROTECTED] writes: also sprach Lestat V [EMAIL PROTECTED] [2006.10.18.0509 +0200]: Can it be normal? Or what may be going on my computer and the LAN? Yes, this can happen. I suggest you use the ifupdown pre-up hook to change them on each machine. iface eth0 inet dhcp

Re: Remote Root In Nvidia xserver Driver

2006-10-18 Thread Izak Burger
On 10/18/06, Matvey Gladkikh [EMAIL PROTECTED] wrote: Stop using blobs like nvidia videodriver in debian. Force them to go opensource! Can the opensource driver do proper acceleration yet? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

Re: Remote Root In Nvidia xserver Driver

2006-10-18 Thread paddy
On Wed, Oct 18, 2006 at 03:30:18AM +0100, paddy wrote: On Tue, Oct 17, 2006 at 09:53:49PM -0400, Noah Meyerhans wrote: On Wed, Oct 18, 2006 at 02:11:24AM +0100, paddy wrote: NB: although some are saying this is a local root exploit only, the bulletin points out it can be exploited by

Re: Remote Root In Nvidia xserver Driver

2006-10-18 Thread Sam Morris
On Tue, 17 Oct 2006 21:53:49 -0400, Noah Meyerhans wrote: However, as I read it, it sounds like you can only run arbitrary code if you are actually accessing the X server directly via a client. While this client can be local or remote, nobody is going to allow unauthenticated remote clients

Re: Remote Root In Nvidia xserver Driver

2006-10-18 Thread Dominic Hargreaves
On Wed, Oct 18, 2006 at 10:42:05AM +, Sam Morris wrote: On Tue, 17 Oct 2006 21:53:49 -0400, Noah Meyerhans wrote: However, as I read it, it sounds like you can only run arbitrary code if you are actually accessing the X server directly via a client. While this client can be local or

Re: Remote Root In Nvidia xserver Driver

2006-10-18 Thread Sam Morris
On Wed, 18 Oct 2006 11:48:18 +0100, Dominic Hargreaves wrote: On Wed, Oct 18, 2006 at 10:42:05AM +, Sam Morris wrote: On Tue, 17 Oct 2006 21:53:49 -0400, Noah Meyerhans wrote: However, as I read it, it sounds like you can only run arbitrary code if you are actually accessing the X

Re: Remote Root In Nvidia xserver Driver

2006-10-18 Thread Henrique de Moraes Holschuh
On Wed, 18 Oct 2006, Sam Morris wrote: sshing to a compromised machine with X forwarding enabled is already a big enough problem without adding root exploits. Don't ssh with X forwarding to an untrusted machine. Ever. The point is that I may trust the machine, it may have been

RE: help: duplicate MAC address

2006-10-18 Thread James Stevenson
Yes this could be perfectly normal. Are you behind a bridge ? -Original Message- From: Lestat V [mailto:[EMAIL PROTECTED] Sent: 18 October 2006 04:10 To: debian-security@lists.debian.org Subject: help: duplicate MAC address I encouter an fake MAC address problem: I found that

Re: help: duplicate MAC address

2006-10-18 Thread Javier Fernández-Sanguino Peña
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote: I encouter an fake MAC address problem: I found that on ARP table of my computer, all IP addresses in my LAN have a same and pecular MAC address. On ARP table of two other computers in the same LAN as mine, different IP addresses have

Re: help: duplicate MAC address

2006-10-18 Thread Lestat V
Thanx. On 10/19/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote: On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote: So, I guess you are saying that if you run 'arp -n' in 'You' and 'Other' systems in the same VLAN you see this: Right? How 'peculiar' is that MAC address you

Re: help: duplicate MAC address

2006-10-18 Thread Lestat V
On 10/19/06, Lestat V [EMAIL PROTECTED] wrote: On 10/19/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote: On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote: I tried /usr/sbin/tcpdump -ei eth0 arp for a while and got results as excerpted as follows: (10.100.105.105 is me)