Qualys Security Advisory Team: "The return of the WIZard", now the full advisory (CVE-2019-10149) is available at https://www.openwall.com/lists/oss-security/2019/06/06/1 … …
Prikaži ovu nit
Qualys Security Advisory Team: "The return of the WIZard" (CVE-2019-10149). Instant LPE in Exim (4.87 to 4.91). Seven days to trigger a RCE. No memory corruption or ROP involved. Bypass NX/ASLR/SSP/PIE/full RELRO/etc. Architecture independent. More at https://www.openwall.com/lists/oss-security/2019/06/05/4 …
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
It's odd to mention "bypass" here as it simply doesn't involve any of those things, similar to how it would be odd to specify every memory corruption defense when talking about a logic bug. "Arbitrary command execution not involving memory corruption" gets the point across better
-
You're absolutely right, it's on another level. I was more concerned by the 280 char limit than the tweet content.
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.