Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
[Full-Disclosure] Re: Linux ELF loader vulnerabilities
From: Ted Percival (tedmrphp.com.au)
Date: Wed Nov 10 2004 - 21:12:03 CST
These vulnerabilities appear to exist in 2.6.9 as well. All five buggy
lines appear verbatim in the 2.6.9 source.
Paul Starzetz wrote:
> Synopsis: Linux kernel binfmt_elf loader vulnerabilities
> Product: Linux kernel
> Version: 2.4 up to to and including 2.4.27, 2.6 up to to and
> including 2.6.8
> Vendor: http://www.kernel.org/
> URL: http://isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt
> CVE: not assigned
> Author: Paul Starzetz <ihaquerisec.pl>
> Date: Nov 10, 2004
> Numerous bugs have been found in the Linux ELF binary loader while
> handling setuid binaries.
Full-Disclosure - We believe in it.