Full Disclosure mailing list archives
Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
From: "Jason A. Donenfeld" <Jason () zx2c4 com>
Date: Mon, 23 Jan 2012 19:41:09 +0100
On Mon, Jan 23, 2012 at 04:55, Jason A. Donenfeld <Jason () zx2c4 com> wrote:
Never seen checksec. Cool. As it turns out, Fedora seems to do a good job at compiling (all? not sure) their suid executables with -pie.
Revision. It does in fact work with fedora. /usr/bin/gpasswd. http://git.zx2c4.com/CVE-2012-0056/tree/mempodipper.c?h=fedora
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up, (continued)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 22)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 23)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up sd (Jan 23)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 23)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 23)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up sd (Jan 24)
- Message not available
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 24)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 22)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jeffrey Walton (Jan 22)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 23)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up Jason A. Donenfeld (Jan 22)
- Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up halfdog (Jan 23)