Network Security

• Packet Signing Vulnerability?
  A report from the Nomad Mobile Research Center (NMRC) that packets on the network were not always signed. This requires the use of a LAN Analyser or sniffer to record packets during a login sequence. This means that internal hackers could gain access equivalent to the user whose login was observed.

Recent SGI Security Announcements

• The IRIX ioconfig(1M) program assigns logical controller numbers to all I/O devices on a Silicon Graphics Origin or Onyx2 system.

  The IRIX disk_bandwidth(1M) program is used to determine the number of I/O operations that can be performed on a given disk device on an Origin or Onyx2 system.

  Both programs are normally only used by IRIX System administrators.

  Unfortunately, a vulnerability has been discovered in both ioconfig(1M) and disk_bandwidth(1M) programs that can lead to a root compromise of the system.

Untitled Paragraph Component

Untitled Paragraph Component

Web Author: Geoff May. Last Update: 08/09/98 Copyright © 1998 by Network Business Services Pty Ltd. All Rights Reserved.