[mdlug] Linux root exploit

[Michael Corral]

2008-02-10, Monsieur Jesse J. Salens a ecrit:
> Michael Corral wrote:
>> Here's a quick way to test if your system is vulnerable:
>> 1. Download <http://downloads.securityfocus.com/vulnerabilities/exploits/27704.c>
>> 2. gcc -o exploit 27704.c
>> 3. [as non-privileged user] ./exploit
>> 4. Try to do some root stuff.
>
> It didn't work on my Fedora 8 box the first time, just caused a kernel
> oops and syslogd spit up on my screen. The second time I compiled and
> ran it, I was given a root prompt.

Yeah, there have been reports of that exploit having different effects,
from kernel oops to system crashes to root prompts, on various distros
with various kernels. None of the effects are good. :(

Michael