Re: New mremap bug
Billy O'Connor <[email protected]> Wed, 18 Feb 2004 13:08:16 -0500
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Organization | Linux From Scratch |
| Message-ID | <[email protected]> |
Christophe Devine <[email protected]> writes: > Billy O'Connor <[email protected]> wrote: > >> http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt > > For those of you who'd want to test for this vulnerability, > I've written some simple exploit code: > > http://linuxfromscratch.org/~devine/mremap_poc_2.c > > Christophe. With MREMAP_MAYMOVE | MREMAP_FIXED, I segfaulted, with MREMAP_MAYMOVE alone, it ran. [billyoc]# uname -a Linux dps11.gnuyork.org 2.4.23-xfs #1 SMP Mi Dez 10 22:25:03 CET 2003 i686 GNU/Linux -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page