Full Disclosure mailing list archives
Re: 0day LINUX 0day LATEST
From: Andrew Dawson <a.dawson () ucl ac uk>
Date: Mon, 28 Jan 2008 15:53:32 +0000
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 28 Jan 2008, at 10:55, Andrew Farmer wrote:
On 28 Jan 08, at 02:13, wejwklekl246 wrote:/* !!PRIVATE !!PRIVATE !!PRIVATE !!PRIVATE !!PRIVATE !!PRIVATE * * afunixroot.c Linux kernel 2.6.x i386 local root exploit<blah blah blah> Compiles a shared library in /tmp/own.so containing the functions int getuid() { return 0; } int geteuid() { return 0; } int getgid() { return 0; } int getegid() { return 0; } and executes /bin/sh with LD_PRELOAD=/tmp/own.so Pretty lame. Protip: "hellc0de" containing lots of \x61-\x7f looks fake.
This whole exploit program is seemingly a massive obsfucation exercise. Apart from the above, the prepare() function has "hidden" socket() and sendto() calls to send a 64 byte parameter block to 213.73.91.29 port 864 (repeated 9 times). The rest is repeated fork/wait/nice stuff that will probably have a DoS effect on the system it's run on, but no privilege elevation... Regards, Andrew. - -- ************************************************************ Andrew Dawson Operating Systems Group Manager Information Systems Education & Information Support Division University College London Gower Street London WC1E 6BT ************************************************************ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iD8DBQFHnfqLPlVbrK39S+4RAtl1AJ0bZ/cu1NdLqXqTdGuIkkMRjbR/+wCfWj+J ZzSCqSWic8q2fd/zvw99WSg= =jTB6 -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- 0day LINUX 0day LATEST wejwklekl246 (Jan 28)
- Re: 0day LINUX 0day LATEST Andrew Farmer (Jan 28)
- Re: 0day LINUX 0day LATEST Andrew Dawson (Jan 28)
- Re: 0day LINUX 0day LATEST Valdis . Kletnieks (Jan 28)
- <Possible follow-ups>
- Re: 0day LINUX 0day LATEST atlas (Jan 28)
- Re: 0day LINUX 0day LATEST kat (Jan 28)
- Re: 0day LINUX 0day LATEST Andrew Farmer (Jan 28)