Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Brad Spengler <spender <at> grsecurity.net>
Subject: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable
Newsgroups: gmane.comp.security.full-disclosure
Date: Friday 17th July 2009 02:26:45 UTC (over 7 years ago)
Title says it all, exploit is at:
http://grsecurity.net/~spender/cheddar_bay.tgz

Everything is described and explained in the exploit.c file.
I exploit a bug that by looking at the source is unexploitable;
I defeat the null ptr dereference protection in the kernel on 
both systems with SELinux and those without.
I proceed to disable SELinux/AppArmor/LSM/auditing

Exploit works on both 32bit and 64bit kernels.

Links to videos of the exploit in action are present in the exploit 
code.

Greets to vendor-sec, 
-Brad



----- End forwarded message -----



----- End forwarded message -----
 
CD: 19ms