D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

[LUG] Root exploit on vmsplice enabled kernels

 

Seems to effect Debian to name but one distro that turns on vmsplice,
including etch (current stable).

http://it.slashdot.org/article.pl?sid=08/02/10/2011257&from=rss

I've verified the example exploit and I can gain root access from my
normal user account.

Though this was worth mentioning, it should only be an issue if you
allow others to have accounts on you machine OR some other bug allows an
attacker to gain non root access.

Happy patching!

Robin



Attachment: signature.asc
Description: OpenPGP digital signature

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html