[ LUGOS ] FW: Re: Intel Pentium Bug

[Alen Salamun]

Hi!

Evo programcka, ki najde programe z najnovejsim pentium bug-om na disku!

LP, Alen

-----FW: <Pine.LNX.3.95.971109193537.3288A-100000 na cayenne.saffroncs.com>-----

Date: Sun, 9 Nov 1997 19:39:10 -0500
Sender: Bugtraq List <BUGTRAQ na NETSPACE.ORG>
From: Jason Parsons <root na SAFFRONCS.COM>
To: BUGTRAQ na NETSPACE.ORG
Subject: Re: Intel Pentium Bug

Re the F0 0F C7 C8 Pentuim bug:

I just wanted ot repost this from the Linux-security list.  Thought it
might be helpful to some here.  This was posted to Linux-security by Sam
Trenholme <set na reality.samiam.org>.

#!/usr/bin/perl

# There is no known software fix to the F0 0F C7 C8 bug at this time

# usage: finddeath dir

# where dir is the directory you recursively look at all programs in
# for instances of the F0 0F C7 C8 sequence

# This script will search for programs with this sequence, which will
# help sysadmins take appropriate action against those running such
# programs

# This script is written (but has not been tested) in Perl4, to
# insure maximum compatibility

sub findit {
  local($dir,$file, na files,$data) = @_;

  undef $/;

  if(!opendir(DIR,$dir)) {
    print STDERR "Can not open $dir: $!\n";
    return 0;
    }

  @files=readdir(DIR);

  foreach $file (@files) {
    if($file ne '.' && $file ne '..') {
      if( -f "$dir/$file" && open(FILE,"< $dir/$file")) {
        $data=<FILE>;
        if($data =~ /\xf0\x0f\xc7\xc8/) {
          print "$dir/$file contains F0 0F C7 C8\n";
          }
        } elsif( -d "$dir/$file") {
         &findit("$dir/$file");
        }
      }
    }

  }

$dir = shift || '/home';

&findit($dir);

--------------End of forwarded message-------------------------

---
 ---------------------------------------------------------------------
/ Alen Salamun, Zrcalo d.o.o., Glavni trg 17b, 2000 Maribor, Slovenia \
| Phone: +386-62-224-389, Fax: +386-62-224-765, GSM: +386-41-684-543  |
|          E-mail: Alen.Salamun na zrcalo.si, snowman na zrcalo.si          |  
\---------------------------------------------------------------------/
/     -= LiNUX =- The only REAL OS | Microsoft is not the answer,     \
\          Microsoft is the question and the answer is NO!!!          /
 ---------------------------------------------------------------------