SecurityFocus

Linux ELF loader vulnerabilities Nov 10 2004 11:59AM
Paul Starzetz (ihaquer isec pl) (3 replies)

Re: Linux ELF loader vulnerabilities Nov 12 2004 12:08PM
Jirka Kosina (jikos jikos cz)

Re: Linux ELF loader vulnerabilities Nov 11 2004 07:52PM
Pavel Kankovsky (peak argo troja mff cuni cz)

Re: Linux ELF loader vulnerabilities Nov 11 2004 03:12AM
Ted Percival (ted mrphp com au) (1 replies)

These vulnerabilities appear to exist in 2.6.9 as well. All five buggy
lines appear verbatim in the 2.6.9 source.

Ted Percival

Paul Starzetz wrote:
> Synopsis: Linux kernel binfmt_elf loader vulnerabilities
> Product: Linux kernel
> Version: 2.4 up to to and including 2.4.27, 2.6 up to to and
> including 2.6.8
> Vendor: http://www.kernel.org/
> URL: http://isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt
> CVE: not assigned
> Author: Paul Starzetz <ihaquer (at) isec (dot) pl [email concealed]>
> Date: Nov 10, 2004
>
> Issue:
> ======
>
> Numerous bugs have been found in the Linux ELF binary loader while
> handling setuid binaries.

[ reply ]

Re: [Full-Disclosure] Re: Linux ELF loader vulnerabilities Nov 11 2004 11:09AM
Jirka Kosina (jikos jikos cz)