Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration

To: <chewkeong@xxxxxxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
From: <dullien@xxxxxx>
Date: Mon, 22 Nov 2004 22:35:17 -0800
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20041122121935.25185.qmail@xxxxxxxxxxxxxxxxxxxxx>

Hey all,

isn't this sort of irrelevant ? If the ACL's are set in a way
to allow an attacker to write to /device/physicalmemory, any
sort of protection mechanism is immediately moot...

Cheers,
dullien@xxxxxx

References:
- [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
  - From: chewkeong

Prev by Date: [CLA-2004:896] Conectiva Security Announcement - bugzilla
Next by Date: Re: Changes to the filesystem while find is running - comments?
Previous by thread: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration
Next by thread: Hardware support for XP SP2 DEP not enabled by default ?
Index(es):
- Date
- Thread