| |||||||||||||
Interesting kernel exploit postedInteresting kernel exploit postedPosted Dec 8, 2010 15:56 UTC (Wed) by SmittyBoy (guest, #65888)In reply to: Interesting kernel exploit posted by zoobab Parent article: Interesting kernel exploit posted
[jack@Tecra sandbox]$ gcc exploit.c
[jack@Tecra sandbox]$ ls -ltrc total 20 -rw-rw-r--. 1 jack jack 5064 Dec 8 16:52 exploit.c -rwxrwxr-x. 1 jack jack 9344 Dec 8 16:52 a.out [jack@RASMAS-Tecra sandbox]$ ./a.out [*] Failed to open file descriptors.
*!*!*!* Didn't get root *!*!*!*
(Log in to post comments)
Interesting kernel exploit posted Posted Dec 8, 2010 16:04 UTC (Wed) by ctg (subscriber, #3459) [Link]
You need the econet module loaded. Which is pretty obscure. Don't know if the same issue is in other, more common, modules...
Interesting kernel exploit posted Posted Dec 8, 2010 16:08 UTC (Wed) by nelhage (subscriber, #59579) [Link] You need the econet module loaded, but most kernels today (including, for instance, nearly all current Ubuntu kernels) will automatically load it if anyone, even an unprivileged user, attempts to create an AF_ECONET socket.
Interesting kernel exploit posted Posted Dec 8, 2010 17:18 UTC (Wed) by tialaramex (subscriber, #21167) [Link]
The POC as it stands is enough to demonstrate this problem and hopefully get it fixed promptly. Altering it to use other bugs in more widespread code while undoubtedly possible is besides the point unless you're a black hat.
|
|||||||||||||