Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
From: "Jason A. Donenfeld" <Jason () zx2c4 com>
Date: Mon, 23 Jan 2012 19:41:09 +0100

On Mon, Jan 23, 2012 at 04:55, Jason A. Donenfeld <Jason () zx2c4 com> wrote:

Never seen checksec. Cool.

As it turns out, Fedora seems to do a good job at compiling (all? not
sure) their suid executables with -pie.


Revision. It does in fact work with fedora. /usr/bin/gpasswd.
http://git.zx2c4.com/CVE-2012-0056/tree/mempodipper.c?h=fedora
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]