Remote execution bug in BSD ping

Re:Remote execution bug in BSD ping by trasz2 on Thursday December 01, 2022 @06:40AM (#33815016)

Note that in FreeBSD, ping is sandboxed using capsicum, so the impact of this is rather low - you can get ping to crash, and send arbitrary packets, and write arbitrary stuff to the terminal, and I think that's it.

[ Parent | on HN ]

Re:Remote execution bug in BSD ping by bell-cot on Thursday December 01, 2022 @10:45AM (#33817777)

If I'm trying to penetrate somebody's network, then being able to send arbitrary packets - from an "inside" server, running a vulnerable ping binary' - sounds pretty darn useful. Maybe I can compromise a device or ten further out, which the vulnerable server occasionally pings. Maybe I've got a botnet, which returns malicious ping replies to IP #'s on my current "would be useful to compromise" list. Maybe...

[ Parent | on HN ]

Re:Remote execution bug in BSD ping by trasz2 on Thursday December 01, 2022 @02:45PM (#33821646)

If you have a way to make them ping your host at just the right moment, and then keep that ping process running.

[ Parent | on HN ]