The Cellar - Clever attack exploits fully-patched Linux kernel

The Cellar (http://cellar.org/index.php)

- Technology (http://cellar.org/forumdisplay.php?f=7)

- - Clever attack exploits fully-patched Linux kernel (http://cellar.org/showthread.php?t=20689)

xoxoxoBruce

07-19-2009 12:50 AM

Clever attack exploits fully-patched Linux kernel

Seems like a serious problem.

Quote:

Linux developers "tried to protect against it and what this exploit shows is that even with all the protections turned to super max, it's still possible for an attacker to figure out ways around this system," said Bas Alberts, senior security researcher at Immunity. "The interesting angle here is the actual thing that made it exploitable, the whole class of vulnerabilities, which is a very serious thing."

link

mbpark

07-19-2009 09:03 AM

Sounds like someone needs to turn on some compiler options.

I know the guy who found this exploit, and have personally met him at least once. He used to work for my friend Shawn at BurstNET years ago. He's a really smart guy who left BurstNET to work on GRSecurity.

It just goes to show that you really need to check everything when writing an OS.

All times are GMT -5. The time now is 09:20 PM.