Linux vmsplice Local Root Exploit

[Vinc Black]

vim ze se tady tyhle veci moc neresi, ale cim vic lidi o tom bude vedet tim lepe...

ve zkratce jde o ziskani root pristupu z jineho uctu... vice odkazy dole


The Linux kernel is prone to multiple memory access vulnerabilities, including:

- A vulnerability that allows unauthorized users to read arbitrary memory locations.
- A vulnerability that allows unauthorized users to write to arbitrary memory locations.

An attacker can exploit these issues to read and write to arbitrary memory locations on the affected computer.

This issue affects Linux kernel versions prior to 2.6.24.1.

http://www.securityfocus.com/bid/27704/info
http://www.abclinuxu.cz/blog/raven/2...l-root-exploit

[NeMeM9aA]

Solidni dira. Jeste dodam, ze je to od jadra 2.6.17 vyse.

[Rainbow]

Mne to nefunguje v 2.6.24:

[-] vmsplice: Function not implemented

A nepodarilo sa mi zistit, ci je to nejakym nastavenim alebo cim.

[admix]

Mne se to na routeru nepodarilo ani zkompilovat (ten 27704.c) a nebo mi to napise "[-] wtf" a nic se nestane (27704-2.c)
Linux selene 2.6.22.5 #8 Sat Oct 6 20:03:38 CEST 2007 i686 Celeron (Mendocino) GenuineIntel GNU/Linux

[Rainbow]

Ked sa ti to neda skompilovat na x86, tak hladaj chybu u seba. Mne to na sparc neslo skompilovat, lebo ten exploit je len pre x86 Ten druhy som ani neskusal - nechodi viacerym ludom.

[admix]

Ja se priznam, ze jsem to neresil - zkusil, neslo, zavrel ) chybi tomu asm/PAGE.h

[Vinc Black]

patch by mel byt uz venku....