FW: Nokia *bsd variant

["Dunker, Noah" <NDunker () FISHNETSECURITY COM>]

(How about I send it to the right place this time?)

I've actually gotten FBSD binaries to run on ipso.  It's a real pain though,
you must statically compile them, or play musical shared libraries.  Neither
of these options are very fun.  Compiling locally on IPSO is a task I dare
not attempt, as there are no headers or anything.  You'd be a lot better off
trying to get the IPSO binary to run on FreeBSD, and writing an exploit for
it, then trying to get the binary exploit to work under IPSO.

Just a little background: IPSO is the *IX derivative which runs on Nokia
"Check Point Appliances".  Basically, it's a Pentium II that's been
re-packaged to look nice rack-mounted.  IPSO is FreeBSD with a lot of custom
kernel stuff, and only very specific hardware support has been compiled in.

If you do sucessfully find an exploit, please post it, along with how you
did it.  As a reseller of Nokia Appliances, I'm very interested in hearing
what you've found so far, as well as how you're progressing in finding an
exploit.

Oh yes... Make sure to notify Nokia and give them time to release a patch.
They've been pretty good about keeping things up-to-date.

--Noah Dunker
Network Security Engineer
FishNet Security

-----Original Message-----
From: Blue Boar [mailto:BlueBoar () THIEVCO COM]
Sent: Friday, September 29, 2000 12:24 AM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Re: Nokia *bsd variant


It's supposed to be a FreeBSD branch.  It's pretty different from
a regular install, from what I recall.  Where's the overflow?

                                        BB

gregory duchemin wrote:
> hi,
>
> is there someone here that exactly know from wich *bsd is nokia ipso
> originated from ?
> I found last day an overflow but naturally no source, no compiler, just a
> gdb...has one of u successfully tried to install and use a pre-compiled
> compiler on this kind of system ?
> thanx for your help
> Gregory
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.