News for hackers. Stuff that matters.
Re:Remote execution bug in BSD ping by bell-cot on Thursday December 01, 2022 @10:45AM (#33817777)
If I'm trying to penetrate somebody's network, then being able to send arbitrary packets - from an "inside" server, running a vulnerable ping binary' - sounds pretty darn useful. Maybe I can compromise a device or ten further out, which the vulnerable server occasionally pings. Maybe I've got a botnet, which returns malicious ping replies to IP #'s on my current "would be useful to compromise" list. Maybe...
Re:Remote execution bug in BSD ping by trasz2 on Thursday December 01, 2022 @02:45PM (#33821646)
If you have a way to make them ping your host at just the right moment, and then keep that ping process running.