Re: Kernel exploit in brk() function. - MORE 2.4.21
Alberto Ferrer <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Organization | Barra Home |
| Message-ID | <[email protected]> |
Resumen, kernels compiled with gcc 2-96 ( 133) not are explotable :) root@secure [~]# uname -a Linux secure.hostmar.com 2.4.21 #1 Tue Aug 5 10:12:27 ART 2003 i686 unknown root@secure [~]# gcc -v Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/2.96/specs gcc version 2.96 20000731 (Red Hat Linux 7.2 2.96-112.7.2) root@secure [~]# cat /proc/version Linux version 2.4.21 ([email protected]) (gcc version 2.96 20000731 (Red Hat Linux 7.3 2.96-113)) #1 Tue Aug 5 10:12:27 ART 2003 root@secure [~]# adduser albert && mv debian-hatorihanzo.c /home/albert && su -l root@secure [~]# su - albert albert@secure [~]# gcc -static -o debian-hatorihanzo debian-hatorihanzo.c albert@secure [~]# ./debian-hatorihanzo [-] Unable to change page protection: Cannot allocate memory [-] Unable to exit, entering neverending loop. [1]+ Stopped ./debian-hatorihanzo albert@secure [~]# fg 1 ./debian-hatorihanzo albert@secure [~]# -------------------------- Alberto Ferrer [email protected] http://www.barrahome.org JID: [email protected] -------------------------- SNMP = Security? Not My Problem! -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page