Linked by Thom Holwerda on Sun 19th Nov 2006 19:08 UTC, submitted by Neti
Databases "I had a few minutes to burn today, so I did what I'm sure you were doing: I read the Oracle Enterprise Linux Services Agreement. It's funny what you find when you start digging around in the legalese that governs the Big Announcement that Oracle made. It makes 'Unbreakable Linux' look a little flimsy."
Thread beginning with comment 184242
To view parent comment, click here.
To read all comments associated with this story, please click here.
NotParker
Member since:
2006-06-01

A significant number of them were:
"allowed a local user to cause a denial of service attack."


Both allowed remote users to do stuff:

#1) "a remote user could cause a denial of service
(panic) by accessing socket buffers memory after freeing them."

#2) "allowed a remote user to cause a denial of service (crash) or potential memory corruption "

Several allow root escalation.

"Now forgive me if i'm wrong, but where in Windows XP can a user NOT cause a DOS / Superuser action / system format?"

It depends whether the user is a "User", "Power User" or "Administrator".

Reply Parent Bookmark Score: 1

stestagg Member since:
2006-06-03

Both allowed remote users to do stuff:

You mentioned 17, claiming that this was a big number. I was pointing out that at least 7 of those, were issues that are present (LOCAL user DOS) and unfixable in Windows XP (assuming default install (i.e. not with special privilege restrictions) - which we must when talking about security advisories)

It depends whether the user is a "User", "Power User" or "Administrator".

No. Users, Power Users and Administrators can DOS/Crash the System, without system patches, anyway.

Reply Parent Bookmark Score: 1

NotParker Member since:
2006-06-01

and unfixable in Windows XP (assuming default install (i.e. not with special privilege restrictions) - which we must when talking about security advisories)

A "user" in a domain has very low privledges in XP.

Reply Parent Bookmark Score: 1