Linux Kernel PROC Filesystem Local Privilege Escalation Vulnerability

forkb0mb.org

Calendar

Back May '13
Mon Tue Wed Thu Fri Sat Sun
    1 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31    

Quicksearch

Categories


All categories

Archives

Blog Administration

Open login screen

Linux Kernel PROC Filesystem Local Privilege Escalation Vulnerability

Sunday, July 16. 2006

Linux Kernel PROC Filesystem Local Privilege Escalation Vulnerability

/*
Requirements:
  • Kernel version <= 2.6.17.4
  • /proc must be mounted suid. On my Fedora Core 6-test1 (x86_64) it is not mounted suid.
  • public PoC requires kernel configuration option CONFIG_BINFMT_AOUT, vulnerability can be exploited without this option, although

    This exploit appears to take advantage of a race-condition within the Linux kernel.

    This comes just days after the prctl(2) vulnerability.
    */
    • Posted by TJE in Advisories, Exploits, Linux, Local, Operating Systems, Race Conditions, Unix, Vulnerabilities at 06:47 | Comments (0) | Trackbacks (0)

    Trackbacks
    Trackback specific URI for this entry

    No Trackbacks

    Comments
    Display comments as (Linear | Threaded)

    No comments

    Add Comment

    E-Mail addresses will not be displayed and will only be used for E-Mail notifications

    To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
    CAPTCHA