[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Linux Kernel 2.6.x PRCTL Core Dump Handling - simple workaround



hi,

setting 750 on /etc/cron.* would stop this exploit

/lars
>
>     if ( !( child = fork() )) {
>         chdir("/etc/cron.d");
>         prctl(PR_SET_DUMPABLE, 2);
>         sleep(200);
>         exit(1);

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/