Bugtraq mailing list archives

Re: SUN almost has a clue! (automountd)


From: alan () LXORGUK UKUU ORG UK (Alan Cox)
Date: Tue, 5 Jan 1999 11:39:36 +0000


  I've been dealing with Sun for 12 years.  I've never heard anyone make this
claim.  And in truth, as we all know, it doesn't take 3 months to test a patch.

Allow me to repeat his experience. The socket ioctl hole that allowed any user
to demolish your entire lan was reported to Sun, I got a message from Casper
acking it and saying he'd fixed it. Over twelve months later and after
posting exploits to bugtraq the patch finally got released.

I'm quite fond of sun kit - they make nice boxes, but they have _real_
problems somewhere in the management structure for releasing patches/updates.

Alan



Current thread: