And if we didn't have enough for this weekend, an exploit for another Linux kernel privilege escalation vulnerability has been posted.
The exploit seems to be working on all 2.6.x kernels and is not related to the previous exploit we've written about.
From limited testing we've done so far, SELinux is blocking this exploit successfully, so the exploit didn't work on RedHat Enterprise Linux 4 machines we've tested this on.
Also, the published exploit depends on the a.out support in the kernel (the CONFIG_BINFMT_AOUT has to be set), but the vulnerability can be exploited no matter if a.out is supported or not.
I will be teaching next: Web App Penetration Testing and Ethical Hacking - SANS London July 2020
Jul 15th 2006
1 decade ago