Advanced

Linux/unix e-mail flaw leaves systems open to attack

Posted by tadelste on · 2 comments
ComputerWorld; By Matthew Broersman
Mail this story
Print this story

Two serious security flaws have turned up in software widely distributed with Linux and Unix. The bugs affect Electronic Mail for Unix (Elm), a venerable e-mail client still used by many Linux and Unix systems administrators, and Mplayer, a cross-platform movie player that is one of the most popular of its kind on Linux. The Elm flaw involves a boundary error when the client reads an e-mail's "Expires" header. A specially crafted e-mail could exploit the bug to cause a buffer overflow and execute malicious code on a system, according to security researchers.

Full Story

  Nav
» Read more about: Story Type: News Story

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

Come on! Yes, both of you!

Earth to ComputerWorld: get a grip.

Who reads mail as root? Who uses elm? Who doesn't update? The intersection of those three sets is less than miniscule - what kind of moron virus writer is going to bother targeting this "niche market"?

I can see the headlines now, "Linux Virus Epidemic, Six Machines Trashed".
Hey, hey, hey! You're not viewing this Windows-favorable vulnerability in the right blackwhite light.ly

You have to hold two, mutually-exclusive opinions simultaneously:

1. Virus/worm authors target Windows solely because of its massive (legitimately obtained!) market share.

2. No program/operating system/whatever is immune from viruses. Therefore Linux is just as likely to implode under the same weight of worms/viruses/trojans/backdoors as Windows.

So yes, 6 linux machines trashed would constitute a massive epidemic that mitigates against ever trying or using Linux. Just like the 2002 "slapper" virus, which was a major, heinous, fatal blow to Linux, infecting around 20,000 machines for a week.

And yes, 6 Windows machines infected doesn't even make the "Wild List", much less compare to the fact that Code Red v2 is *still* making the rounds, about 3 years after it was released.

Get with the Program, Dude! How are AV companies going to make a mint if they can't scare multi-colored tar out of the sheeple?

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post