[nflug] Rootkits

[Josh Johnson]

I kind of thought that when a user was able to become root (against the 
admin's wishes) on any *nix box, it was a big deal nowadays and the 
offending hole was patched up?

-JoshJ
http://lotuseaters.no-ip.com

On Thu, 3 Nov 2005, Mark Musone wrote:

> No, this is not true at all..
>
> Any remote exploit could allow a non-root user to access a Linux box. From
> there, a local exploit can be done, raising a users level to root..This is
> actually a standard mechanism.
>
> Although someone can gain direct root access by either a remote exploit in
> which the daemon runs as root, or a local exploit being done _as_ root, it
> is most commonly accomplished using the two-step process as described above.
>
>
> -Mark
>
>
>
> -----Original Message-----
> From: nflug-bounces at nflug.org [mailto:nflug-bounces at nflug.org] On Behalf Of
> Eric Benoit
> Sent: Thursday, November 03, 2005 12:37 PM
> To: nflug at nflug.org
> Subject: Re: [nflug] Another reason to not use M$ products...
>
> So, you can only get root kits if you are logged in as root or someone
> gains access to root, speaking of Linux not MS?
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>
_______________________________________________
nflug mailing list
nflug at nflug.org
http://www.nflug.org/mailman/listinfo/nflug