While you're at it... Be careful installing Sun Security patches... They tend to introduce holes. :)
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377
"Sun Cobalt RaQ 4 server appliances with the SHP (Security Hardening Patch) installed are vulnerable to a remotely exploitable vulnerability. A local or remote unprivileged user may be able to execute arbitrary code with root (uid 0) privileges. "
Followed up by this one which made it on the back page of slashdot:
http://developers.slashdot.org/article.pl?sid=02/12/13/1314251&mode=thread&tid=172
"We have discovered two flaws within the MySQL server that can be used by any MySQL user to crash the server. Furthermore one of the flaws can be used to bypass the MySQL password check or to execute arbitrary code with the privileges of the user running mysqld."
Ahh, Open-Source insecurity, and the ostrich like mentality...
This post was edited by sodablue on Friday, December 13, 2002 at 11:01.
|