Vulnerability Development mailing list archives

Local root through vulnerability in ping on linux.


From: Gerrie <gerrie () HIT2000 ORG>
Date: Sat, 19 Aug 2000 12:18:21 +0200

Again some blackhats have a zeroday exploits in their hands.

It's exploits a bug in the linux kernel by using ping, does someone have
more info?

gtx,
Gerrie
HIT2000
btw: I think that the we have to prevent this like the way we did with  "
ping -s 65468 -R foo " bug.
chmod 0500 `which ping` ; chown root.root `which ping`


Current thread: