I disagree with you. You cannot compare complexity of IE (and major security issues derived from that) with complexity of some tools like yast or drakconf; their scope is a limited one and it could be considered simple as the rest of *nix tools, being build after *nix philosophy (the only job: editing configuration files).
No one says you cannot exploit a Linux host if you have a shell account (even if it is much, much harder to do it), but compared with Windows and the plethora of IE/Outlook/RPC remote exploits...no comment.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/252/27274#27274