grsecurity forums

by **TSJason** » Mon Jan 29, 2007 4:11 pm

http://archives.neohapsis.com/archives/ ... /0469.html

Please advise on this.

by **aldee** » Mon Jan 29, 2007 4:17 pm

This has already been covered.

by **TSJason** » Mon Jan 29, 2007 4:56 pm

Aldee,

I disagree. I noted the "Pre-Advisory" which was mentioned innappropriately in your "2.4.34" posting and this is not what I'm concerned about. This is now shown as an official bug with a working example of how to create a local overflow to gain root priviledges (maybe read the entire page that I linked).

I'm also concerned that Spender or the Paxguy haven't issued an official notice that this is either
a) completely incorrect
or
b) this is fixed in the current patch

Thanks for your posting anyway.

by **aldee** » Mon Jan 29, 2007 5:05 pm

http://forums.grsecurity.net/viewtopic.php?t=1646
http://grsecurity.net/pipermail/grsecur ... 00835.html
http://www.grsecurity.net/news.php#digitalpoc

by **TSJason** » Mon Jan 29, 2007 5:10 pm

Hi,

Thank you. Your assistance is greatly appreciated.

grsecurity forums

Grsec Pax Vulnerability

Grsec Pax Vulnerability