My port of that pptpd exploit to Linux was apparently so horrendous that it prompted ‘r4nc0rwh0r3′ of ‘blightninjas’ to take the time to do it properly. In my defence, the original code really sucked, and I myself only needed the testing part to work (which seemed to work for me). It also compiled fine for me with gcc 3.2.3 (worksforme(tm)). And I in no way proclaim myself to be a good C programmer! Anyway, my laziness and lameness was thoroughly ridiculed by them here. Find their own fixed version here. At least I got my name on Bugtraq. Roll on fame and the big dollar.
-
horribly ported
April 26th, 2003Tags: bugtraq, coding, linux, Security, sploit -
PPTP vulnerability
April 22nd, 2003Tags:A buffer overflow vulnerability has been found in the PoPToP PPTP server. The daemon is commonly run as root, therefore this can be pretty serious. A sample exploit was released for windows, and I’ve ported it to Linux (gcc). The problem on our own firewalls was mitigated because, although we have to run the crappy software to provide simple windows VPN access, we have some stack protection in our kernels.
-
OpenGL
April 17th, 2003Tags: alife2D alife is fine, but add a whole new dimension, and you’re in a whole new dimension! I’m learning how to code some OpenGL (through the SDL libraries) so that I can make my bacteria and squiks dance on the Z too. The Radeon 9000 in this PowerBook is speeding the process up a good few tens of frames per second.
-
PowerPC and Debian
April 8th, 2003Tags: coldfusion, Debian, linux, macromediaI’ve moved architecture and Linux distro by upgrading to a PowerBook G4.
I think we’ve finally given up on try to get Macromedia Coldfusion MX anywhere near stable on our Linux distro. Macromedia are making us jump through a lot of troubleshooting hoops, I don’t even think we can reproduce the problem yet. We’re helping the client implement some Windows servers now instead. The only really difficult or unsolvable problems we have always involve closed source software. I really rather dislike working with it. Matt started documenting some of our ‘progress’, but I doubt the results we have are coherent enough for anyone to find useful.
John Leach is a human being living in Leeds, UK.