 | | Re: RHEL Kernel vulnerable to the recent
uselib() privilege escalation vulnera | Re: RHEL Kernel vulnerable to the recent
uselib() privilege escalation vulnera 2005-01-11 - By Garrick Staples
Back
On Tue, Jan 11, 2005 at 05:40:59PM +0100, Arjan van de Ven alleged:
> > I've not been able to get the published exploit to work on
> > rhel3.
>
> that i can believe for two reasons
> 1) exploits that are published are often crippled a bit to make them
> less harmful
> 2) RHEL changes a bunch of layouts so that offsets and other constants
> might need changing
>
> that is true for basically any kind of exploit and my comments are not
> about this specific one; however "the exploit doesn't give me root" is
> not a guarantee that you're not vulnerable, sometimes all it takes is to
> change one number and BLAM.
I didn't mean to imply that my wget, compile, and execute was an exhaustive
analysis of the situation :)
I'm just saying that the exploit, as published, doesn't seem to work on rhel3.
--
Garrick Staples, Linux/HPCC Administrator
University of Southern California
--
Taroon-list mailing list
Taroon-list@(protected)
http://www.redhat.com/mailman/listinfo/taroon-list
Earn $52 per hosting referral at Lunarpages.
|
|
|