Gentoo Bug 209533 - sys-kernel/gentoo-sources-2.6.24-r1: vmsplice() exploit still works?

Flags:

Requestee:

Pending

Approved

Assigned_To

()

Filename

Description

Type

Creator

Created

Size

Actions

Create a New Attachment (proposed patch, testcase, etc.)

View All

Bug 209533 depends on:

Show dependency tree

Bug 209533 blocks:

Description:

Opened: 2008-02-10 14:32 0000

I *think* vmsplice() root exploit still works. I installed
gentoo-sources-2.6.24-r1 now, and nothing changed ^^ likewhoa said I should
file bug :p I have amd64 if that matters.

http://www.milw0rm.com/exploits/5092

Reproducible: Always

Steps to Reproduce:
$ uname -a
Linux cnupc 2.6.24-gentoo-r1 #3 SMP PREEMPT Sun Feb 10 15:10:52 CET 2008 x86_64
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz GenuineIntel GNU/Linux

$ ./getroot
-----------------------------------
 Linux vmsplice Local Root Exploit
 By qaaz
-----------------------------------
[+] mmap: 0x100000000000 .. 0x100000001000
[+] page: 0x100000000000
[+] page: 0x100000000038
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4038
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0x2aab81994000 .. 0x2aab819c6000
[+] root
cnupc getroot # whoami
root


Expected Results:  
Not given me root I think :p

------- Comment #1 From Jakub Moc (RETIRED) 2008-02-10 14:33:48 0000 -------


*** This bug has been marked as a duplicate of bug 209460 ***

Bugzilla Bug 209533

sys-kernel/gentoo-sources-2.6.24-r1: vmsplice() exploit still works?

Last modified: 2008-02-10 14:33:48 0000