Re: Urgent !! Serious Linux Security Bug....

[coxa () cableol net (Alan Cox)]

> > On the Linux machine, you need to be running kernel version 2.0.7(It's
> > the
> > lowest we run) up to version 2.0.20(The highest we're running).
>
> Actually, I'm running 2.1.1 and it works on that as well...

It seems to work rather nicely on Digital Unix (some revisions), AIX,
Linux 2.0.x and Linux 2.1.x - has anyone tried it on NT ?

Ironically its a well known problem that is tested by the ip_send tool. It
just happened that the test tool I used didnt construct a packet with
a useful IP protocol field and it thus never hit the layer of
code that can't handle forged big packets.

As well as the patch quoted there is a slightly newer revision that
also happens to log who tried to blow up your computer.

Alan