Linked by Thom Holwerda on Mon 16th Oct 2006 22:26 UTC, submitted by Johan M;son Lindman
Privacy, Security, Encryption A recent security advisory announced today by Rapid7 explains, "the NVIDIA Binary Graphics Driver for Linux is vulnerable to a buffer overflow that allows an attacker to run arbitrary code as root. This bug can be exploited both locally or remotely (via a remote X client or an X client which visits a malicious web page). A working proof-of-concept root exploit is attached to this advisory." The advisory goes on to note that the FreeBSD and Solaris binary drivers are also likely vulnerable and cautions, "it is our opinion that NVIDIA's binary driver remains an unacceptable security risk based on the large numbers of reproducible, unfixed crashes that have been reported in public forums and bug databases."
Permalink for comment 172384
To read all comments associated with this story, please click here.
RE: Greg Kroah-Hartmann is right:
by pucko on Tue 17th Oct 2006 07:18 UTC in reply to "Greg Kroah-Hartmann is right:"
pucko
Member since:
2006-07-17

Things like that dangerous blob should definetely be banned from the kernel space. If they run in user space, ok. But I don't want them in the kernel space.

What the.. You have a CHOICE you know, you don't have to use it if you don't want to.
Banning is NOT a solution, it only takes away people's ability to choose what they want to run and where.

So Greg is WRONG if he tris to limit my freedom to choose.

Reply Parent Score: 1