[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up

To: noloader@xxxxxxxxx
Subject: Re: [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
From: "Jason A. Donenfeld" <Jason@xxxxxxxxx>
Date: Mon, 23 Jan 2012 19:41:09 +0100

On Mon, Jan 23, 2012 at 04:55, Jason A. Donenfeld <Jason@xxxxxxxxx> wrote:

> Never seen checksec. Cool.
>
> As it turns out, Fedora seems to do a good job at compiling (all? not
> sure) their suid executables with -pie.
>
>
Revision. It does in fact work with fedora. /usr/bin/gpasswd.
http://git.zx2c4.com/CVE-2012-0056/tree/mempodipper.c?h=fedora

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

References:
- [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
  - From: Jason A. Donenfeld
- Re: [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
  - From: Jason A. Donenfeld
- Re: [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
  - From: Jeffrey Walton
- Re: [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
  - From: Jason A. Donenfeld

Prev by Date: [Full-disclosure] [SECURITY] [DSA 2301-2] rails regression
Next by Date: [Full-disclosure] [SECURITY] [DSA 2392-1] openssl security update
Previous by thread: Re: [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
Next by thread: Re: [Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up
Index(es):
- Date
- Thread