标签 ‘Local’ 下的日志

Linux Kernel 2.x sock_sendpage() Local Root Exploit #2

> Linux NULL pointer dereference due to incorrect proto_ops initializations
> > ————————————————————————-

Quick and dirty exploit for this one:

http://www.frasunek.com/proto_ops.tgz
back: http://milw0rm.com/sploits/2009-proto_ops.tgz

# milw0rm.com [2009-08-14]

Tags: , , ,

Linux Kernel 2.x sock_sendpage() Local Ring0 Root Exploit

/* dedicated to my best friend in the whole world, Robin Price
the joke is in your hands

just too easy — some nice library functions for reuse here though

credits to julien tinnes/tavis ormandy for the bug

may want to remove the __attribute__((regparm(3))) for 2.4 kernels, I have no time to test
阅读全文 »

Tags: , , ,