[Tech] Rilevate tre falle di sicurezza sui server Linux

Le tre vulnerabilità possono permettere a un utente del sistema di diventare "root" (sotto altri sistemi operativi si parlerebbe di "super user" o di "administrator"), e quindi di prendere il controllo totale del server.

Because Linux is frequently used on shared servers, security holes that allow a user to expand their access rights on a computer are serious, said Alfred Huger, the senior director of engineering for security software company Symantec. However, they are not as critical as flaws that allow an outsider to compromise the computer, he said.



(...)



For example, the recently announced flaw in Windows that allows an attacker to remotely execute code on any computer running the Microsoft operating system (vedi precedente post su questo blog, NdR), is a more serious vulnerability. That flaw could allow a worm to spread throughout the vulnerable computers attached to the Internet. The security holes in the Linux kernel are of more use to an attacker looking to compromise a single computer.

Le vulnerabilità sono state segnalate dalla polacca iSEC Security Research, una compagnia che si occupa di sicurezza informatica.



Fonte: News.com.