Grsec Pax Vulnerability
Posted: Mon Jan 29, 2007 4:11 pmPage 1 of 1
Posted: Mon Jan 29, 2007 4:11 pmPosted: Mon Jan 29, 2007 4:17 pmThis has already been covered.
Posted: Mon Jan 29, 2007 4:56 pmAldee,
I disagree. I noted the "Pre-Advisory" which was mentioned innappropriately in your "2.4.34" posting and this is not what I'm concerned about. This is now shown as an official bug with a working example of how to create a local overflow to gain root priviledges (maybe read the entire page that I linked).
I'm also concerned that Spender or the Paxguy haven't issued an official notice that this is either
a) completely incorrect
or
b) this is fixed in the current patch
Thanks for your posting anyway.
I disagree. I noted the "Pre-Advisory" which was mentioned innappropriately in your "2.4.34" posting and this is not what I'm concerned about. This is now shown as an official bug with a working example of how to create a local overflow to gain root priviledges (maybe read the entire page that I linked).
I'm also concerned that Spender or the Paxguy haven't issued an official notice that this is either
a) completely incorrect
or
b) this is fixed in the current patch
Thanks for your posting anyway.
Posted: Mon Jan 29, 2007 5:05 pmPosted: Mon Jan 29, 2007 5:10 pmHi,
Thank you. Your assistance is greatly appreciated.
Thank you. Your assistance is greatly appreciated.