This Linux grinch could put a hole in your security stocking

A grinch may be snatching away some year-end holiday time, forcing Linux system administrators to fill a gaping security hole in their systems.

Named after the proverbially grumpy Dr. Seuss character, the grinch vulnerability could affect all Linux systems, potentially providing attackers with unfettered root access, according to security service provider Alert Logic, which introduced grinch to the world Tuesday via a blog post.

Grinch could be as severe as the Shellshock Linux shell flaw that roiled the Internet in September, the company warned.

To read this article in full or to leave a comment, please click here

Network World Security