Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability Aug 15 2007 12:46PM
Dan Yefimov (dan ns15 lightwave net ru)
On Tue, 14 Aug 2007, Wojciech Purczynski wrote:

>
> Small correction - I forgot to add setuid(0) ;)
>
> PARENT CHILD
> ----------------------------------------------------------------
> fork()
> prctl(PR_SET_PDEATHSIG)
> execve("/bin/setuid-binary")
> setuid(0)
> exit()'ed or ...

[ more ]  




 

Privacy Statement
Copyright 2008, SecurityFocus