Messages in this thread | | | Subject | Re: Kernels 2.2 and 2.4 exploit (ALL VERSION WHAT I HAVE TESTED UNTILL NOW!) | From | Arjan van de Ven <> | Date | 19 Mar 2003 15:28:00 +0100 |
| |
On Wed, 2003-03-19 at 15:13, Robinson Maureira Castillo wrote: > On Wed, 19 Mar 2003, Andrus wrote: > > You can download working exploit on > > http://www.members.ee/ptrace-exploit.c > > > > Its hell long exploit as I know, and still not patched! > > > > I have it, it's no longer on that URL, but I test it against the last > errata kernel from RedHat and it's not vulnerable. > > [rmaureira@linux rmaureira]$ ./ptrace-xploit > [-] Unable to attach: Operation not permitted > Killed
there is some misunderstanding about at least one of the exploits out there; one of them will, when successful, make itself setuid-root....
result:
admin tries exploit, succeeds admin updates kernel to fixed one admin tries exploit, gets root again due to setuid-root and thinks the kernel is not fixed admin yells at $vendor for providing a broken fix
[unhandled content-type:application/pgp-signature] | |