Day: December 4, 2003

  • New NDISWrapper Supports 2.4 Kernel

    There is a new release of NDISwrapper, a GPL’d wrapper for NDIS devices (such as Broadcom Wi-Fi cards) under Linux.  It now supports the 2.4 kernel, which means that I’ll be checking it out as soon as possible.  The first release only worked with the 2.6 kernel.

    Other new features include WEP support, scanning for access points, and lots of bug squashing.

    Pontus Fuchs is my hero.

  • Nasty Rsync Vulnerability

    The rsync page has noted that an obscure vulnerability in some rsync installations combined with a vulnerability in the Linux kernel can equal a pretty nasty exploit:

    The rsync team has received evidence that a vulnerability in rsync was recently used in combination with a Linux kernel vulnerability to compromise the security of a public rsync server. While the forensic evidence we have is incomplete, we have pieced together the most likely way that this attack was conducted and we are releasing this advisory as a result of our investigations to date.

    Newsforge points to more coverage by secunia.com.  Thanks for the heads up, Jim.