/*
**
** 0x82-CVE-2009-2698
** Linux kernel 2.6 < 2.6.19 (32bit) ip_append_data() local ring0 root exploit
**
** Tested White Box 4(2.6.9-5.ELsmp),
** CentOS 4.4(2.6.9-42.ELsmp), CentOS 4.5(2.6.9-55.ELsmp),
** Fedora Core 4(2.6.11-1.1369_FC4smp), Fedora Core 5(2.6.15-1.2054_FC5),
** Fedora Core 6(2.6.18-1.2798.fc6).
阅读全文 »
> Linux NULL pointer dereference due to incorrect proto_ops initializations
> > ————————————————————————-
Quick and dirty exploit for this one:
http://www.frasunek.com/proto_ops.tgz
back: http://milw0rm.com/sploits/2009-proto_ops.tgz
# milw0rm.com [2009-08-14]
Tags: Exploit, Kernel, Linux, Local/* dedicated to my best friend in the whole world, Robin Price
the joke is in your hands
just too easy — some nice library functions for reuse here though
credits to julien tinnes/tavis ormandy for the bug
may want to remove the __attribute__((regparm(3))) for 2.4 kernels, I have no time to test
阅读全文 »
