lkml.org 
[lkml]   [2008]   [Feb]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    Subjectkernel 2.6.24.1 still vulnerable to the vmsplice local root exploit
    Hi,

    As the subject says the 2.6.24.1 is still vulnerable to the vmsplice
    local root exploit.

    [opa@test tmp]$ uname -a
    Linux tester 2.6.24.1 #1 Sun Feb 10 00:06:49 EST 2008 i686 unknown
    [opa@test tmp]$ ./vms

    -----------------------------------
    Linux vmsplice Local Root Exploit
    By qaaz
    -----------------------------------
    [+] mmap: 0x0 .. 0x1000
    [+] page: 0x0
    [+] page: 0x20
    [+] mmap: 0x4000 .. 0x5000
    [+] page: 0x4000
    [+] page: 0x4020
    [+] mmap: 0x1000 .. 0x2000
    [+] page: 0x1000
    [+] mmap: 0xb7f56000 .. 0xb7f88000
    [+] root
    [root@test tmp]#
    [root@test tmp]# id
    uid=0(root) gid=0(root) groups=2033(opa)
    [root@test tmp]# uname -a
    Linux test 2.6.24.1 #1 Sun Feb 10 00:06:49 EST 2008 i686 unknown

    Is there any known fix/patch for this?


    \
     
     \ /
      Last update: 2008-02-10 07:07    [W:0.021 / U:0.040 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site