Re: DSA-311-1 New kernel packages - Bug is not fixed!
Hi,
On Mon, Jun 09, 2003 at 08:25:27PM +0200, Helmar wrote:
> I just upgraded my kernel image from 2.4.18-k6 to 2.4.18-1-k6 and i
> cannot confirm that the above bug has been fixed. The simple exploit (i
> think it has been from bugtraq) is still working fine, giving every
> local user easily root privileges.
>
> Could it be that this has only been fixed in more recent kernel versions
> or has there been some kind of error?
>
> I hope this has been the right list to post on...
> Helmar++
Some exploits change the permissions and owner of the binary to user
root, setuid. Are you sure this is not what happened to you?
(I just tried on my box, and the bug seems to be fixed.)
Regards,
Nicolas
Reply to: