Unix, Linux open to new attacks

For years, while Microsoft suffered through serial embarrassments over program vulnerabilities, Unix and Linux users enjoyed what in now known to have been a false sense of security. In recent months, analysts have detected a succession of old holes so serious that they could be used to remotely administer computers.

"Format string" vulnerabilities have existed for years but are just now being discovered, perhaps because of the growing popularity of the operating systems. Attackers prompt a target computer to display a string of text characters with formatting commands and manipulate them in such a manner that causes the computer to run a program.

To access the web site of the Argentine analyst who made the most recent discovery, click core-sdi.com. For analysis, go to news.com.