Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
From: Jeffrey Walton <noloader () gmail com>
Date: Sun, 22 Jan 2012 22:53:26 -0500

Good point about [lack of] compiler and linker hardening on the `su`
binary (and probably many others). Perhaps distributions should run
Checksec (http://www.trapkit.de/tools/checksec.html) on their

On Sun, Jan 22, 2012 at 6:25 PM, Jason A. Donenfeld <Jason () zx2c4 com> wrote:
Server presently DoS'd, or dreamhost is tweaking again.

Cache link:


On Sun, Jan 22, 2012 at 19:19, Jason A. Donenfeld <Jason () zx2c4 com> wrote:

Hey Everyone,

I did a detailed write-up on exploiting CVE-2012-0056 that some of
y'all might appreciate. Pretty fun bug to play with -- dup2ing all
over the place for the prize of getting to write arbitrary process
memory into su :-).

The write up is available on my blog here: http://blog.zx2c4.com/749 . Enjoy.


Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]