full-disclosure - Linux kernel 0day - dynamite inside, don't burn your fingers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060714144225.052762d1@mail.slave-tothe-box.net>
Date: Fri Jul 14 21:42:25 2006
From: jlay at slave-tothe-box.net (James Lay)
Subject: Linux kernel 0day - dynamite inside,	don't
	burn your fingers

On Fri, 14 Jul 2006 21:35:17 +0100 (BST)
"Joanna R." <h00lyshit@...oo.ie> wrote:

> Hello,
> 
> attached 0day kernel 2.6 local root exploit. This is a new genuine
> bug,  unpatched in 2.6.17.4 - don't get confused by prctl inside - it
> is only used to change process status.
> 
> The code exploits a root race in /proc
> 
> have a nice day.
>  


Seg faults on my slackware 2.6.17.4 system

James