RE: [ALUG] Another Linux 0-Day (GHOST)

[Laura A Knotek]

Thanks for this information.

Laura A Knotek
Sent from my Windows Phone

---

From: alex kot
Sent: ‎27/‎01/‎2015 16:23
To: akro...@googlegroups.com
Subject: [ALUG] Another Linux 0-Day (GHOST)

Well not so much of a 0-Day since this bug was discovered and slowly patched almost 2 years ago.  This exploit can allow malicious user to allow remote code execution to a full compromise.  So just make sure you are running a version of GLIBC above 2.17.  More info on the link below.  Also props to that company for working with all the vendor years in advance and still not releasing a POF (proof of concept).

https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability

--
You received this message because you are subscribed to the Google Groups "Akron Linux Users Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to akronlug+u...@googlegroups.com.
To post to this group, send email to akro...@googlegroups.com.
Visit this group at http://groups.google.com/group/akronlug.
For more options, visit https://groups.google.com/d/optout.

[Laura A Knotek]

Here's another article. http://blog.trendmicro.com/trendlabs-security-intelligence/not-so-spooky-linux-ghost-vulnerability/

Laura A Knotek
Sent from my Windows Phone

---

From: admf...@gmail.com
Sent: ‎28/‎01/‎2015 23:27
To: akro...@googlegroups.com
Subject: Re: [ALUG] Another Linux 0-Day (GHOST)

lets stay clear headed about this..

http://techrights.org/2015/01/28/spooky-qualys-fud/

it is nothing but Qualys trying to trump up their business.