Re: Exploit in 2.6 kernels

Baruch Even
2005-04-12T12:28:24Z

You can find the source at
http://www.securiteam.com/exploits/5VP0N0UF5U.html

The fix:
http://linux.bkbits.net:8080/linux-2.6/cset@422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html|ChangeSet@-1d

CAN: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0736

John M Collins wrote:
> Please CC any reply to jmc AT xisl.com as I'm not subscribed - thanks
>
> We had 5 machines broken into last night all but one with kernel 2.6.8
> and found a binary "krad-no-longer-private.c" had been downloaded
>
> It contains the string:
>
> k-rad.c - linux 2.6.* CPL 0 kernel exploit
> Discovered Jan 2005 by sd <sd@fucksheep.org>
>
> If you want to look at it, I've copied it (with mode set to 444 of
> course) to www.xisl.com/hack
>
> Hope that is helpful
>