Saturday, September 18, 2010

[0Day] linux 32bit compat vuln (root shell)

0

The 32-bit compatibility mode in 64-bit Linux kernels (or in any kernel for that matter) is a little bit scary. Not just because it's an increased attack surface versus having purely 32-bit or purely 64-bit modes, but because of the type of input processing that has to be performed by any such compatibility layer. It invariably involves a significant amount of subtle bit wrangling between 32/64-bit values, using primitives that I'd argue most programmers aren't normally exposed to. The possibility of misuse and abuse is very real.

Download exploit:
http://sota.gen.nz/compat2/robert_you_suck.c

0 comments:

Post a Comment

About Me

My photo
Блог за истражување и развој на информациска безбедност, кој е наменет за постирање на најнови ранливости и слабости. Founder darknessn1k0!4

 
Design by ThemeShift | Bloggerized by Lasantha - Free Blogger Templates | Best Web Hosting