Re: Kernel exploit in brk() function.
Christophe Devine <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Organization | Linux From Scratch |
| Message-ID | <[email protected]> |
Sam Halliday <[email protected]> wrote: > > bash-2.05a$ gcc -static hatorihanzo.c > > bash-2.05a$ ./a.out > > sh-2.05a# id > > uid=0(root) gid=0(root) > hmm... strangely it fails for me on a 2.4.22 kernel; i thought it was still > vulnerable? > > gcc -static hatorihanzo.c > ./a.out > [-] Unable to unmap stack: Invalid argument > > but, it did work on a Redhat 7.2 2.4.20-19.7 kernel. Yeah, some friend of mine noticed that too. It looks like on most distros like Debian the exploit works; but it appears to fail when compiled with recent versions of gcc/binutils. -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page