|
DESCRIPTION The modprobe program is susceptible to shell metacharacter attacks in the names of the modules it loads. SOLUTION Download the following RPM packages to the NetWinder into a temporary
directory, then install them with the command "rpm -Uvh *.rpm". Be sure
there are no other files ending in ".rpm" in the temporary directory. See
http://www.netwinder.org/security/install.html for more help. Required packages http://www.netwinder.org/updates/3.1-15/armv4l/modutils-2.3.20-1.armv4l.rpm REFERENCES Reported on BugTraq by Michal Zalewski and Sebastian Krahmer on November 12, 2000. Thanks to Rod Stewart for building and testing the NetWinder RPMs. |