Unix Security Holes! 44 of ‘em!   - 2,185 Views, 1 Comment

Summary: Professor D.J. Bernstein of the University of Illinois at Chicago has notified the Unix security community that his students have found no fewer than forty four security vulnerabilities in Unix. Bernstein gave the students for his MCS Computer Science (Unix) course the assignment to ...

Previous Article « Maryland Anti-Spam Law Held Unconstitutional
Read Next Article » A New Meaning for the “Mile High Club” - Wireless Internet on Airplanes

  Follow Anne on Twitter

Professor D.J. Bernstein of the University of Illinois at Chicago has notified the Unix security community that his students have found no fewer than forty four security vulnerabilities in Unix.

Bernstein gave the students for his MCS Computer Science (Unix) course the assignment to find ten previously undiscovered security holes in Unix, and boy did they deliver!

Despite the discovery, however, one of Bernstein’s students reports on Slashdot that most of the class failed, and that they themselves expect to fail despite averaging As on the exams. Wow, he must be a tough grader!

The Unix programs found to have security holes include CUPS, NASM, mpg123, MPlayer, xine-lib, and many others.

According to the student, the class of 25 was charged with finding the holes in “currently deployed Unix software”, which means you IT administrators who are administering systems running various flavours and derivitives of Unix had better take note.

A complete list of the emails sent out notifying the SecureSoftware mailing list of the holes is available at http://tigger.uic.edu/~jlongs2/holes/, and also includes jpeg2avi, meshviewer, and qwik-smtp.

Remember, while Unix is still considered to be far more secure than most other OSs out there, nothing is invulnerable.

You can read more about this on Slashdot.

Unix Security Holes! 44 of ‘em!

 Follow Anne on Twitter

 Twitter Explained in Plain English

Previous Article « Maryland Anti-Spam Law Held Unconstitutional
Read Next Article » A New Meaning for the “Mile High Club” - Wireless Internet on Airplanes

Read more:

»  Even Unpatched, Linux Most Secure OS

»  No Wait, These Ã…re the Last Two Windows Holes of the Year

»  Microsoft Windows Unsafe at Any Speed - Sees Two New Security Flaws Every Week!

»  Repair Internet Explorer - Is It Possible and Is It Worth It?

For additional similar stories check out our archives on Security

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

1 Comment »

  1. Unix Security Holes! 44 of ?em!
    Professor D.J. Bernstein of the University of Illinois at Chicago has notified the Unix security community that his students have found no fewer than forty four security vulnerabilities in Unix. Bernstein gave the students for his MCS Computer Science …

    Trackback by Lockergnome's IT Professionals — 12/15/2004 @ 8:46 pm

RSS feed for comments on this post. TrackBack URI

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 12/15/2004
The Internet Patrol
Patrolling the Internet for You!