Follow me as I struggle with rogue technology, insane programmers, and impossible math questions in a battle to the death.

Monday, February 11, 2008

Linux Kernel 2.6 local root exploit

I tried out this exploit in a few places. Most other networks I'm on are using something like Red Hat, as opposed to something like Ubuntu or Debian.

I was definitely able to break into a few Ubuntu boxes using it. Fortunately you can only get in through a user account on the system, so you really only need to fear the users already on your system, unless someone happens to compromise one of those user accounts. Still, I consider this an egregious exploit, and I'm surprised it went as long as it did without someone fixing vmsplice.

Labels: ,

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home