[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Kernel 2.4 ioperm



Hi!

On Fri May 23, 2003 at 04:16:22PM +0200, Steffen Schulz wrote:
> Am I right that a local User is able to crash the system
> by putting evil data into these mysterious I/O-Ports?
> Is privilege escalation possible?
> 
> Is this exploitable out of a chroot-jail(ssh,postfix)?

AFAICS this bug is not as evil as the ptrace bug but it's a "good" DoS
for your system. And yes this one can event circumvent a chroot-jail.

so long
Thomas

-- 
 .''`.  Obviously we do not want to leave zombies around. - W. R. Stevens
: :'  : Thomas Krennwallner <djmaecki at ull dot at>
`. `'`  1024D/67A1DA7B 9484 D99D 2E1E 4E02 5446  DAD9 FF58 4E59 67A1 DA7B
  `-    http://bigfish.ull.at/~djmaecki/



Reply to: