[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: local root exploit



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello, Carlos Tirado.

On 10.01.2005 18:36 you said the following:

| [+] SLAB cleanup
|     child 1 VMAs 65406
| [+] moved stack bfffe000, task_size=0xc0000000, map_base=0xbf800000
| [+] vmalloc area 0xd4000000 - 0xe7ff1000
|     Wait... -
| [+] race won maps=51294
|     expanded VMA (0xbfffc000-0xffffe000)
| [!] try to exploit 0xd4915000
| [+] gate modified ( 0xffec90f4 0x0804ec00 )
| [+] exploited, uid=0
|
| sh-2.05a# whoami
| root


Yep :-(


- --
Boris B. Zhmurov
mailto: bb@kernelpanic.ru
"wget http://kernelpanic.ru/bb_public_key.pgp -O - | gpg --import"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFB4qMEmEQixi5w37YRArjIAJoCl5lpS9/MlbQuZki/A0etOguEagCgjzEl
t6crnW83NP6x4X7wStz/KGs=
=eGOn
-----END PGP SIGNATURE-----



Reply to: