Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: MythTV: Users

Nvidia binary driver root exploit

 

 

MythTV users RSS feed   Index | Next | Previous | View Threaded


briandlong at gmail

Aug 2, 2012, 4:34 AM

Post #1 of 3 (538 views)
Permalink
Nvidia binary driver root exploit

For those of us running the Nvidia binary driver, this exploit looks
serious:

http://permalink.gmane.org/gmane.comp.security.full-disclosure/86747

/Brian/


jan.ceuleers at gmail

Aug 2, 2012, 8:38 AM

Post #2 of 3 (506 views)
Permalink
Re: Nvidia binary driver root exploit [In reply to]

On 08/02/2012 01:34 PM, Brian Long wrote:
> For those of us running the Nvidia binary driver, this exploit looks serious:
>
> http://permalink.gmane.org/gmane.comp.security.full-disclosure/86747

Certainly serious, but as this is a MythTV list the significance
should not be overstated.

AIUI this is a local privilege escalation vulnerability. So a local
user is able to acquire root access to the machine. Since MythTV
generally operates in the relatively benign home environment (i.e.
no rogue users) and on machinery that is generally not itself
Internet-facing, I don't think that there is imminent danger to
the readership here, as an attacker needs to break into the
machine in the first place.

HTH, Jan
_______________________________________________
mythtv-users mailing list
mythtv-users [at] mythtv
http://www.mythtv.org/mailman/listinfo/mythtv-users


nick.rout at gmail

Aug 4, 2012, 4:12 PM

Post #3 of 3 (464 views)
Permalink
Re: Nvidia binary driver root exploit [In reply to]

On Fri, Aug 3, 2012 at 3:38 AM, Jan Ceuleers <jan.ceuleers [at] gmail> wrote:
> On 08/02/2012 01:34 PM, Brian Long wrote:
>> For those of us running the Nvidia binary driver, this exploit looks serious:
>>
>> http://permalink.gmane.org/gmane.comp.security.full-disclosure/86747
>
> Certainly serious, but as this is a MythTV list the significance
> should not be overstated.
>
> AIUI this is a local privilege escalation vulnerability. So a local
> user is able to acquire root access to the machine. Since MythTV
> generally operates in the relatively benign home environment (i.e.
> no rogue users)

Barring teenagers studying compsci at university of course (yes I have one).

> and on machinery that is generally not itself
> Internet-facing, I don't think that there is imminent danger to
> the readership here, as an attacker needs to break into the
> machine in the first place.
>
> HTH, Jan
> _______________________________________________
> mythtv-users mailing list
> mythtv-users [at] mythtv
> http://www.mythtv.org/mailman/listinfo/mythtv-users
_______________________________________________
mythtv-users mailing list
mythtv-users [at] mythtv
http://www.mythtv.org/mailman/listinfo/mythtv-users

MythTV users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.