|
ru.linux- RU.LINUX --------------------------------------------------------------------- From : alex@starmarket.ru 2:5020/400 19 Jan 2001 15:53:53 To : All Subject : Re: reiser fs -------------------------------------------------------------------------------- Alexei Laganeuve <Alexei.Laganeuve@p1.f101.n5003.z2.fidonet.org> wrote: AL> Пpивет All! AL> Сpочно тpебyется хаpактеpистика надежности raiser fs и возможности ее AL> использования на сеpвеpах, плз мылом. Очень хотелось бы yслышать AL> _объективное_ мнение. Заpанее благодаpен. ReiserFS is a file system alternative to the Linux ext2 file system. It was originally written by Hans Reiser, and is freely available and publicly maintained. A problem has been reported in the handling of long file names with ReiserFS version 3.5.28 on SuSE Linux distribution 7.0. It is possible to create a directory with a long file name (the initial example displayed a directory with 768 characters), then attempt to list the file system using system binary ls or with built in shell function echo and create a Denial of Service. Upon attempting to list or echo the contents of the filesystem, a kernel buffer overflow occurs, overwriting variables on the stack including possibly the return address, as well as crashing the system. It may be possible for a malicious user to execute arbitrary code, deny service to legitimate users, and potentially break out of a chroot environment. This vulnerability is yet unverified. bugtraq id 2180 class Failure to Handle Exceptional Conditions cve GENERIC-MAP-NOMATCH remote No local Yes published January 09, 2001 updated January 12, 2001 vulnerable Hans Reiser ReiserFS 3.5.28 S.u.S.E. Linux 7.0 not vulnerable AL> Alexei -- Отправлено через сервер Talk.Ru - http://www.talk.ru --- ifmail v.2.15dev5 * Origin: Digital Commerce (2:5020/400) Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
Архивное /ru.linux/2099950df6ab7.html, оценка из 5, голосов 10
|