* ptrace patch @ 2003-03-20 14:14 Christoph Baumann 2003-03-20 14:33 ` Tomas Szepe 2003-03-20 14:45 ` James Bourne 0 siblings, 2 replies; 4+ messages in thread From: Christoph Baumann @ 2003-03-20 14:14 UTC (permalink / raw) To: linux-kernel FYI: The ptrace patch at http://www.hardrock.org/kernel/2.4.20/linux-2.4.20-ptrace.patch does not seem to work. I tried the exploit at http://sinuspl.net/ptrace/isec-ptrace-kmod-exploit.c on a machine running the patched kernel and it still brought up a root shell. Mit freundlichen Gruessen / Best regards Dipl.-Phys. Christoph Baumann --- SORCUS Computer GmbH Im Breitspiel 11 c D-69126 Heidelberg Tel.: +49(0)6221/3206-0 Fax: +49(0)6221/3206-66 ^ permalink raw reply [flat|nested] 4+ messages in thread
* re: ptrace patch 2003-03-20 14:14 ptrace patch Christoph Baumann @ 2003-03-20 14:33 ` Tomas Szepe 2003-03-20 14:45 ` James Bourne 1 sibling, 0 replies; 4+ messages in thread From: Tomas Szepe @ 2003-03-20 14:33 UTC (permalink / raw) To: Christoph Baumann; +Cc: linux-kernel > [cb@sorcus.com] > > FYI: > The ptrace patch at > http://www.hardrock.org/kernel/2.4.20/linux-2.4.20-ptrace.patch does not > seem to work. > I tried the exploit at http://sinuspl.net/ptrace/isec-ptrace-kmod-exploit.c > on a machine running the patched kernel and it still brought up a root > shell. Your post is a hoax. Check your binary for +s. -- Tomas Szepe <szepe@pinerecords.com> ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: ptrace patch 2003-03-20 14:14 ptrace patch Christoph Baumann 2003-03-20 14:33 ` Tomas Szepe @ 2003-03-20 14:45 ` James Bourne 2003-03-20 14:55 ` Christoph Baumann 1 sibling, 1 reply; 4+ messages in thread From: James Bourne @ 2003-03-20 14:45 UTC (permalink / raw) To: Christoph Baumann; +Cc: linux-kernel On Thu, 20 Mar 2003, Christoph Baumann wrote: > FYI: > The ptrace patch at > http://www.hardrock.org/kernel/2.4.20/linux-2.4.20-ptrace.patch does not > seem to work. > I tried the exploit at http://sinuspl.net/ptrace/isec-ptrace-kmod-exploit.c > on a machine running the patched kernel and it still brought up a root > shell. Hi, Here is a test: bash$ md5sum isec-ptrace-kmod-exploit.c f3a5c17bf8d207d3f4828020d1bcfa0a isec-ptrace-kmod-exploit.c bash$ make isec-ptrace-kmod-exploit cc isec-ptrace-kmod-exploit.c -o isec-ptrace-kmod-exploit bash$ ./isec-ptrace-kmod-exploit [-] Unable to attach: Operation not permitted Killed bash$ id uid=151(myusername) gid=151(myusername) groups=151(mygrpname) bash$ uname -a Linux myhostname 2.4.20-9-PE2650-6650 #1 SMP Mon Mar 17 11:22:15 MST 2003 i686 unknown bash$ Thankfully it does work. Check your binary for suid root. Regards, James Bourne > > > Mit freundlichen Gruessen / Best regards > Dipl.-Phys. Christoph Baumann > --- > SORCUS Computer GmbH > Im Breitspiel 11 c > D-69126 Heidelberg > > Tel.: +49(0)6221/3206-0 > Fax: +49(0)6221/3206-66 > > - > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > Please read the FAQ at http://www.tux.org/lkml/ > -- James Bourne, Supervisor Data Centre Operations Mount Royal College, Calgary, AB, CA www.mtroyal.ab.ca ****************************************************************************** This communication is intended for the use of the recipient to which it is addressed, and may contain confidential, personal, and or privileged information. Please contact the sender immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communication received in error, or subsequent reply, should be deleted or destroyed. ****************************************************************************** "There are only 10 types of people in this world: those who understand binary and those who don't." ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: ptrace patch 2003-03-20 14:45 ` James Bourne @ 2003-03-20 14:55 ` Christoph Baumann 0 siblings, 0 replies; 4+ messages in thread From: Christoph Baumann @ 2003-03-20 14:55 UTC (permalink / raw) To: James Bourne; +Cc: linux-kernel Oh, stupid me! Of course it makes suid root. /me is banging his head against the monitor... Mit freundlichen Gruessen / Best regards Dipl.-Phys. Christoph Baumann --- SORCUS Computer GmbH Im Breitspiel 11 c D-69126 Heidelberg Tel.: +49(0)6221/3206-0 Fax: +49(0)6221/3206-66 ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2003-03-20 14:47 UTC | newest] Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2003-03-20 14:14 ptrace patch Christoph Baumann 2003-03-20 14:33 ` Tomas Szepe 2003-03-20 14:45 ` James Bourne 2003-03-20 14:55 ` Christoph Baumann
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®