Re: Kernel exploit in brk() function. - MORE 2.4.21
Ricardo Barberis <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Organization | Dattatec.com |
| Message-ID | <[email protected]> |
Alberto Ferrer wrote: > With gcc 2.95 in LFS are explotable, with gcc 3.3.1 not, so Ricardo > nwo are uploading the exploit compiled in LFS ( with gcc 2.95) to all > RH servers for test > > On Fri, 5 Dec 2003 14:37:59 +0000 > Sam Halliday <[email protected]> wrote: > >> Alberto Ferrer wrote: >> > Resumen, kernels compiled with gcc 2-96 ( 133) not are explotable >> > :) >> >> you sure about that? have you tried compiling the 'sploit with a >> different gcc? >> >> i wouldnt say gcc-2.96 compiled kernels are not expoitable... the >> 'sploit might just need a few tweeks to make it work... there is a >> buffer overflow there which cannot be fixed just by using another >> compiler. >> >> cheers, >> Sam I just uploaded the exploit compiled on LFS-5.0 with 2.95.3 and (fortunately) it didn't work on a kernel 2.4.21 compiled with 2.96 At least *that* exploit, let's see who fixes it :) Cheers, -- Ricardo Barberis Usuario Linux Nº 250625: http://counter.li.org Usuario LFS Nº 5121: http://www.linuxfromscratch.org LFS en castellano: http://www.lfs-es.org -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page