Re: BugTraq Kernel 2.2.19

[Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>]

Kenneth Pronovici <pronovic@skyjammer.com> writes:

> I can't make the ptrace exploit work on my 2.2.19 system... but I might
> be doing something wrong (I'm not quite sure what to expect).  I get:
>    
>    attached
>    exec ./insert_shellcode 30505
>    execl: Operation not permitted

Since the bug is a race condition, it's possible that it is hard to
exploit.  Especially the exploit using newgrp is a bit fragile.
There's a different exploit using /bin/su, which is perhaps a bit more
reliable. See: 

   http://cert.uni-stuttgart.de/archive/bugtraq/2001/10/msg00153.html

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898