[37312] in bugtraq
Re: Linux ELF loader vulnerabilities
daemon@ATHENA.MIT.EDU (Ted Percival)
Thu Nov 11 11:43:53 2004
Message-ID: <4192D883.4010107@mrphp.com.au>
Date: Thu, 11 Nov 2004 13:12:03 +1000
From: Ted Percival <ted@mrphp.com.au>
MIME-Version: 1.0
To: security@isec.pl
Cc: full-disclosure@lists.netsys.com, bugtraq@securityfocus.com
In-Reply-To: <Pine.LNX.4.44.0411101257070.28446-100000@isec.pl>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
These vulnerabilities appear to exist in 2.6.9 as well. All five buggy
lines appear verbatim in the 2.6.9 source.
Ted Percival
Paul Starzetz wrote:
> Synopsis: Linux kernel binfmt_elf loader vulnerabilities
> Product: Linux kernel
> Version: 2.4 up to to and including 2.4.27, 2.6 up to to and
> including 2.6.8
> Vendor: http://www.kernel.org/
> URL: http://isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt
> CVE: not assigned
> Author: Paul Starzetz <ihaquer@isec.pl>
> Date: Nov 10, 2004
>
> Issue:
> ======
>
> Numerous bugs have been found in the Linux ELF binary loader while
> handling setuid binaries.
