Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Linux ELF loader vulnerabilities
From: Ted Percival <ted () mrphp com au>
Date: Thu, 11 Nov 2004 13:12:03 +1000

These vulnerabilities appear to exist in 2.6.9 as well. All five buggy lines appear verbatim in the 2.6.9 source.

Ted Percival

Paul Starzetz wrote:
Synopsis:  Linux kernel binfmt_elf loader vulnerabilities
Product:   Linux kernel
Version:   2.4 up to to and including 2.4.27, 2.6 up to to and
           including 2.6.8
Vendor:    http://www.kernel.org/
URL:       http://isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt
CVE:       not assigned
Author:    Paul Starzetz <ihaquer () isec pl>
Date:      Nov 10, 2004


Numerous  bugs  have  been  found  in  the Linux ELF binary loader while
handling setuid binaries.

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]