Slashdot is powered by your submissions, so send in your scoop


Forgot your password?

Submission Summary: 0 pending, 34 declined, 4 accepted (38 total, 10.53% accepted)


Submission + - Root privileges through Linux kernel bug (

Lars T. writes: "The H has a story about a Linux kernel bug that allows root level access. "According to a report written by Rafal Wojtczuk, a conceptual problem in the memory management area of Linux allows local attackers to execute code at root level. The Linux issue is caused by potential overlaps between the memory areas of the stack and shared memory segments." SUSE maintainer Andrea Arcangeli provided a fix for the problem in September 2004, but for unknown reasons this fix was not included in the Linux kernel. The bug is not related to the X Server bug found by Brad Spengler."

Submission + - Toyota recalls cars for sticky accelerators ( 2

Lars T. writes: "You may remember this Slashdot story from 3 months ago: Toyotas Suddenly Accelerate; Owners Up In Arms. Toyota has now confirmed the problem and are recalling some out of 8 series of cars. Unlike what many in the discussion suspected, the problem is not a software issue, but mechanical: "What is the condition that has prompted Toyota to take this action? In rare instances, there is a possibility that certain accelerator pedal mechanisms may, mechanically stick in a partially depressed position or return slowly to the idle position.""

Submission + - MIME sniffing vulnerability in Internet Explorer

Lars T. writes: "Heise reports that IE's MIME sniffing feature, intended to provide security against falsely identified file types (e.g. download and automatic execution of .hta files) can backfire and allow the execution of HTML and JavaScript from within images that are called directly via their URL. This especially becomes a problem for sites that allow users to upload images."

"The Mets were great in 'sixty eight, The Cards were fine in 'sixty nine, But the Cubs will be heavenly in nineteen and seventy." -- Ernie Banks