bugtraq - Re: Linux kernel do_brk() proof-of-concept exploit code

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 2 Dec 2003 17:21:13 +0000
From: Calum <bugtraq@...strial.co.uk>
To: Christophe Devine <DEVINE@....cnam.fr>
Cc: bugtraq@...urityfocus.com
Subject: Re: Linux kernel do_brk() proof-of-concept exploit code

On Tuesday 02 December 2003 3:16 am, Christophe Devine wrote:

> The following program can be used to test if a x86 Linux system
> is vulnerable to the do_brk() exploit; use at your own risk.

This POC code needs nasm greater than 0.98.36, otherwise you get the following 
error when trying to compile it.

exploit@...ble exploit $ nasm -v
NASM version 0.98.36 compiled on Jul 17 2003
exploit@...ble exploit $ nasm brk_poc.asm -o a.out
brk_poc.asm:5: error: attempt to set a negative program origin

It works with 0.98.38.

-- 

The early bird may get the worm, but the second mouse gets the cheese.
http://gk.umtstrial.co.uk/~calum/