Bugtraq mailing list archives

Re: x86 vulnerability ?


From: Thomas Dullien <dullien () GMX DE>
Date: Tue, 1 May 2001 10:21:56 +0200

On Tue, 24 Apr 2001 16:27:33 -0700, Eric Hall wrote:

On Sun, May 07, 2000 at 11:44:14AM +0100, Cyber Hunter wrote:
Does anyone know anything about the vulnerability found by the group LSD in
the x86 systems ? That has helped them to win the Argus Event ?
http://www.argus-systems.com/events/infosec/#Rules

I would like to study this.

      Probably from the 2001-002 NetBSD advisory, see below
for the start of it (bugtraq archives, netbsd site, etc. for
the whole thing).  It specifically mentions that Solaris x86
has the same problem mentioned in the advisory.

The original poster asked about priviledge escalation under NT/2k,
and as AFAIK there is no LDT in which an attacker can create
callgates, I doubt this is applicable to NT/2k.

Cheers,
Thomas


Current thread: