full-disclosure - Linux Local Root -- CVE-2012-0056 -- Detailed Write-up

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAHmME9rX7zOiWoXr70Kc8PG5BKvsbcFYii8S07Ht9EsEH1B4bA@mail.gmail.com>
Date: Sun, 22 Jan 2012 19:19:41 +0100
From: "Jason A. Donenfeld" <Jason@...c4.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Linux Local Root -- CVE-2012-0056 -- Detailed
	Write-up

Hey Everyone,

I did a detailed write-up on exploiting CVE-2012-0056 that some of
y'all might appreciate. Pretty fun bug to play with -- dup2ing all
over the place for the prize of getting to write arbitrary process
memory into su :-).

The write up is available on my blog here: http://blog.zx2c4.com/749 . Enjoy.

Jason

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/