Re: Kernel exploit in brk() function. - MORE 2.4.21
Alberto Ferrer <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Organization | Barra Home |
| Message-ID | <[email protected]> |
With gcc 2.95 in LFS are explotable, with gcc 3.3.1 not, so Ricardo nwo are uploading the exploit compiled in LFS ( with gcc 2.95) to all RH servers for test On Fri, 5 Dec 2003 14:37:59 +0000 Sam Halliday <[email protected]> wrote: > Alberto Ferrer wrote: > > Resumen, kernels compiled with gcc 2-96 ( 133) not are explotable :) > > you sure about that? have you tried compiling the 'sploit with a different gcc? > > i wouldnt say gcc-2.96 compiled kernels are not expoitable... the 'sploit might > just need a few tweeks to make it work... there is a buffer overflow there which > cannot be fixed just by using another compiler. > > cheers, > Sam > -- > To win just once against the odds > And once be smiled on by the Gods > To race with speed along the track > Break the tape and not look back > To never have considered losing > As if to win is by your choosing > Bare you soul for all to find > An honest heart and an open mind > -- Saw Doctors, "To Win Just Once" > -- -------------------------- Alberto Ferrer [email protected] http://www.barrahome.org JID: [email protected] -------------------------- SNMP = Security? Not My Problem! -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page