OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Viraj Alankar (valankarIFXCORP.COM)
Date: Mon Apr 02 2001 - 10:03:14 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Sat, 31 Mar 2001, Tim Yardley wrote:

    > As always, there are always ways to improve things. This version of the
    > exploit posted here previously overwrites the dl _start routine and doesnt
    > modify eip. This will help on stack non-exec systems and doesnt require
    > you to calculate the bss offset. I didn't test it, but this should still
    > work on a stackguard compiled program as well.

    This works on my RH 6.2 w/ 2.2.16-3. I see that Redhat released a 2.2.17
    RPM on 2/8/2001 with 'ptrace' as one of the keywords. Does anyone know if
    this RPM addresses the problem?

    Viraj.