Re: [SECURITY] [DSA 1111-2] New Linux kernel 2.6.8 packages fix privilege escalation

[Cedar Cox <cox@waterstoneinc.com>]

Is this in fact CVE-2006-3626?

Moritz Muehlenhoff wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> - --------------------------------------------------------------------------
> Debian Security Advisory DSA 1111-2                    security@debian.org
> http://www.debian.org/security/                               Dann Frazier
> July 26th, 2006                         http://www.debian.org/security/faq
> - --------------------------------------------------------------------------
>
> Package        : kernel-source-2.6.8 et. al.
> Vulnerability  : race condition
> Problem-Type   : local
> Debian-specific: no
> CVE ID         : CVE-2006-3625
>
> It was discovered that a race condition in the process filesystem can lead
> to privilege escalation.


--
-Cedar

What's an Intel chip doing in a Mac?
  A whole lot more than it's ever done in a PC.