[Bug 18520] reading memory via /dev/sdX

[bugzilla-daemon at bugzilla.ubuntu.com]

Please do not reply to this email.  You can add comments at
http://bugzilla.ubuntu.com/show_bug.cgi?id=18520
Ubuntu | linux


mdz at ubuntu.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|critical                    |normal




------- Additional Comments From mdz at ubuntu.com  2005-11-18 19:24 UTC -------
There are easier ways to exploit a system given physical access, without
involving such a device, so I don't think this creates a realistic security
exposure.

Ben, is it possible that the I/O buffer isn't zeroed, and the device is broken
enough that it reports success but doesn't actually write anything to memory?

Juerd, check "ls -l /dev/sdb" and make sure that the device numbers are correct.
 Do you always get the same data from the device, or different data each time?

-- 
Configure bugmail: http://bugzilla.ubuntu.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.