Re: GIF for KDE

[Dima <dima@eris.dev.null>]

You wrote:
>Rick Jones:
>> 
>> Yes.  I saw the posting to the kde list by Alan Cox, I believe it was.  I
>> wonder if you, or another Debianite, could tell me just how easy it would
>> be to attach to a tcp port and send/recv commands to take advantage of
>> that security hole?  I know a programmer would have no trouble exploiting
>> this.  What about the common Joe?
>
>All it takes is one cracker who writes an exploit script for it. I have no
>idea how easy it is to do, though Alan gave the impression it was trival..

It's in any book on unix network programming (in Stevens it's in chapter 6.)
I'm not familiar with KDE but I suspect it'll crash if you simply stuff enough
random bytes in the socket (see ch. 6.6 op. cit. for code.)  You'd need to look
at KDE sources if you wanted to do something nastier.

However, as Rick says, all it takes is one cracker.

--
Dimitri


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .