BugTraq
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability
Aug 15 2007 12:46PM
Dan Yefimov (dan ns15 lightwave net ru)
On Tue, 14 Aug 2007, Wojciech Purczynski wrote:
>
> Small correction - I forgot to add setuid(0) ;)
>
> PARENT CHILD
> ----------------------------------------------------------------
> fork()
> prctl(PR_SET_PDEATHSIG)
> execve("/bin/setuid-binary")
> setuid(0)
> exit()'ed or ...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
>
> Small correction - I forgot to add setuid(0) ;)
>
> PARENT CHILD
> ----------------------------------------------------------------
> fork()
> prctl(PR_SET_PDEATHSIG)
> execve("/bin/setuid-binary")
> setuid(0)
> exit()'ed or ...
[ more ]