Backdoor Planted in Linux Kernel
Sunday November 9, 2003
A development version of an upcoming release of the Linux kernel code was found to contain a small, but very sophisticated backdoor. During routine integrity checks of the code a discrepancy was found. The error was small and under casual inspection most likely would have passed as a typo or other accident. However, it was later discovered that this simple and subtle change in the kernel code would grant the attacker root administrative privileges. The malicious code has been removed and an investigation is underway to determine how the development site was compromised. For more about this story you can read Kevin Poulsen's article on SecurityFocus.com: Thwarted Linux backdoor hints at smarter hacks.
