<img src="http://www.userbase.be/forum/images/portal/pinguin2.jpg" border="0" align="left"> Linux users are urged to patch their systems following yesterday's disclosure of a serious security vulnerability in Linux kernel software.
"The flaw stems from shortcomings in code used to control virtual memory (the mremap(2) system call)and can be exploited to run malicious code on vulnerable systems (as explained here).
Polish security outfit iSEC, which discovered the vuln, warns that "proper exploitation of this vulnerability may lead to local privilege escalation including execution of arbitrary code with kernel level access".
The flaw affects the 2.2, 2.4 and 2.6 series Linux kernel, according to iSEC. Even though exploiting the vulnerability is far from straightforward, proof-of-concept exploit code has been created for the 2.4 kernel."
lees hierover meer
bron: The Register
Linux kernel security vuln fixed
- Styno
- Elite Poster
- Berichten: 1440
- Lid geworden op: 06 nov 2003, 17:38
- Locatie: Somewhere over the rainbow....
Specifiek voor Redhat: Fix zit in de laatste kernel die rhn uitgebracht heeft... up2date is your friend
Styno
Styno
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq'|dc
echo '16i[q]sa[ln0=aln100%Pln100/snlbx]sbA0D4D465452snlbxq'|dc
echo '16i[q]sa[ln0=aln100%Pln100/snlbx]sbA0D4D465452snlbxq'|dc