Full Disclosure mailing list archives
Re: ** FreeBSD local r00t zeroday
From: Colin Percival <cperciva () freebsd org>
Date: Mon, 30 Nov 2009 17:26:46 -0800
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, A short time ago a "local root" exploit was posted to the full-disclosure mailing list; as the name suggests, this allows a local user to execute arbitrary code as root. Normally it is the policy of the FreeBSD Security Team to not publicly discuss security issues until an advisory is ready, but in this case since exploit code is already widely available I want to make a patch available ASAP. Due to the short timeline, it is possible that this patch will not be the final version which is provided when an advisory is sent out; it is even possible (although highly doubtful) that this patch does not fully fix the issue or introduces new issues -- in short, use at your own risk (even more than usual). The patch is at http://people.freebsd.org/~cperciva/rtld.patch and has SHA256 hash ffcba0c20335dd83e9ac0d0e920faf5b4aedf366ee5a41f548b95027e3b770c1 I expect a full security advisory concerning this issue will go out on Wednesday December 2nd. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (FreeBSD) iEYEARECAAYFAksUbjcACgkQFdaIBMps37LP9ACgljaYCfgVuhD2gd9Natpq4H/9 i48An1mgl+Mih+AWN7J9KZ1rsiEU31IZ =MPXj -----END PGP SIGNATURE----- -- Colin Percival Security Officer, FreeBSD | freebsd.org | The power to serve Founder / author, Tarsnap | tarsnap.com | Online backups for the truly paranoid _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: ** FreeBSD local r00t zeroday Oliver Pinter (Dec 01)
- <Possible follow-ups>
- Re: ** FreeBSD local r00t zeroday r00f r00f (Dec 01)
- Re: ** FreeBSD local r00t zeroday Benji (Dec 01)
- Re: ** FreeBSD local r00t zeroday Oliver Pinter (Dec 01)
- Re: ** FreeBSD local r00t zeroday Colin Percival (Dec 01)
- Re: ** FreeBSD local r00t zeroday David Berard (Dec 01)
- Re: ** FreeBSD local r00t zeroday Robert Portvliet (Dec 01)
- Re: ** FreeBSD local r00t zeroday FBI BOT (Dec 01)
- Re: ** FreeBSD local r00t zeroday Dawid Golunski (Dec 01)
- Re: ** FreeBSD local r00t zeroday r00f r00f (Dec 01)
- Re: ** FreeBSD local r00t zeroday Oliver Pinter (Dec 01)
- Re: ** FreeBSD local r00t zeroday McGhee, Eddie (Dec 02)
- Re: ** FreeBSD local r00t zeroday r00f r00f (Dec 01)
- Re: ** FreeBSD local r00t zeroday bk (Dec 01)
- Re: ** FreeBSD local r00t zeroday Benji (Dec 01)
- Re: ** FreeBSD local r00t zeroday bk (Dec 01)
(Thread continues...)