The 32-bit compatibility mode in 64-bit Linux kernels (or in any kernel for that matter) is a little bit scary. Not just because it's an increased attack surface versus having purely 32-bit or purely 64-bit modes, but because of the type of input processing that has to be performed by any such compatibility layer. It invariably involves a significant amount of subtle bit wrangling between 32/64-bit values, using primitives that I'd argue most programmers aren't normally exposed to. The possibility of misuse and abuse is very real.
Download exploit:
http://sota.gen.nz/compat2/robert_you_suck.c
Saturday, September 18, 2010
[0Day] linux 32bit compat vuln (root shell)
0About Me
- За Zer0-0ne
- Блог за истражување и развој на информациска безбедност, кој е наменет за постирање на најнови ранливости и слабости. Founder darknessn1k0!4
0 comments:
Post a Comment