[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] vsFTPd remote code execution
- To: "HI-TECH ." <isowarez.isowarez.isowarez@xxxxxxxxxxxxxx>
- Subject: Re: [Full-disclosure] vsFTPd remote code execution
- From: Dan Rosenberg <dan.j.rosenberg@xxxxxxxxx>
- Date: Tue, 13 Dec 2011 14:56:38 -0500
> Anyone with an up2date linux local root which only makes use of syscalls? :>
>
This is all fun stuff, and definitely worth looking into further, but
if you've got a local kernel exploit that you can trigger from inside
vsftpd, you don't need this (potential) vulnerability in vsftpd - you
already win.
-Dan
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/