Full Disclosure mailing list archives
Re: Linux kernel exploit
From: mezgani ali <handrix () gmail com>
Date: Wed, 8 Dec 2010 09:05:51 +0000
it's worked on 2.6.35.7, nice exploit On Wed, Dec 8, 2010 at 6:09 AM, Rem7ter <rem7ter () gmail com> wrote:
Why gcc exp.c -o exp alert "Error: too many Argument"? I test it in Linux 2.6.X. 2010/12/7 coderman <coderman () gmail com> On Tue, Dec 7, 2010 at 12:25 PM, Dan Rosenberg<dan.j.rosenberg () gmail com> wrote:... I've included here a proof-of-concept local privilege escalationexploit...* This exploit leverages three vulnerabilities to get root, all ofwhich were* discovered by Nelson Elhage: ... * However, the important issue, CVE-2010-4258, affects everyone, and itwould* be trivial to find an unpatched DoS under KERNEL_DS and write aslightly* more sophisticated version of this...nice :) clearly demonstrates why risk is complicated and seemingly minor defects (worth delaying patches for weeks/months? ;) can combine into truly ugly vulnerabilities... _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
-- Ali MEZGANI Network Engineering/Security http://securfox.wordpress.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Linux kernel exploit, (continued)
- Re: Linux kernel exploit nArEn ÁĹ0ПΞ Ŵ0ĹŦஇ (Dec 08)
- Re: Linux kernel exploit leandro_lista (Dec 08)
- Re: Linux kernel exploit Benji (Dec 08)
- Re: Linux kernel exploit David Flores (Dec 08)
- Re: Linux kernel exploit Rem7ter (Dec 08)
- Re: Linux kernel exploit Vadim Grinco (Dec 09)
- Re: Linux kernel exploit Jean Pierre Dentone (Dec 09)
- Re: Linux kernel exploit Urlan (Dec 10)
- Re: Linux kernel exploit Rem7ter (Dec 07)
- Re: Linux kernel exploit mezgani ali (Dec 08)
- Re: Linux kernel exploit Thomas SOETE (Dec 08)
- Re: Linux kernel exploit Dan Rosenberg (Dec 08)
- Re: Linux kernel exploit nix (Dec 08)
- Re: Linux kernel exploit Marcus Meissner (Dec 08)
- Re: Linux kernel exploit niklas | brueckenschlaeger (Dec 08)
- Re: Linux kernel exploit R0me0 *** (Dec 13)