Re: Uptime script?
| From: | Felix Kronlage | Date: | Thu, 17 May 2001 07:59:13 +0000 |
| Subject: | Re: Uptime script? | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-53177@lists.php.net to get a copy of this message | ||
On Wed, May 16, 2001 at 06:35:32PM -0700, Ryan Christensen wrote:
> Take a machine down, knowing it's uptime? (I.e., it's easier to hack a box
> that's been up for 5 months.. as opposed to one that hasn't been??)
By knowing the uptime and the version of the OS (e.g. kernel-version)
you know to which exploits a machine could be vurnerable.
Say, linux-kernel 2.2.18 has a exploit of some sort and a patch was
released 10 days ago, and a remote machine has a 2.2.18 and a uptime of
20 days, you know that it should be vulnerable to the exploit.
but this is getting off-topic...
-fkr
--
gpg-fingerprint: 076E 1E87 3E05 1C7F B1A0 8A48 0D31 9BD3 D9AC 74D0
|http://www.hazardous.org/ | whois -h whois.ripe.de
FKR-RIPE |
|all your base are belong to us | shame on me | fkr@IRCnet |