Critical Bug & Exploit Here!!

[Acid_1]

Here's an explanation of the bug:

http://blog.cr0.org/2009/08/linux-null- ... ue-to.html


Here's the code to use it:

http://grsecurity.net/%7Espender/wunderbar_emporium.tgz

Run the wunderbar_emporium.sh in a shell. If it starts doing some funky colors after a few seconds, it works. If not, then you're secure.


Want to get it to run anyways, just for fun? Drop to a root terminal, and then type:

Code: Select all

echo 0 > /proc/sys/vm/mmap_min_addr

Then run the compiled binary that occured from the shell script.

Code: Select all

./pwnkernel

It should drop you to a root shell.

To fix back to a secure system, go to the root terminal and type:

Code: Select all

echo 65536 > /proc/sys/vm/mmap_min_addr

I thought it was interesting. This affects all kernels for the last 8 years!

[DrHu]

http://forums.linuxmint.com/viewtopic.p ... ml#p180273

[Husse]

To check if you are at risk

Code: Select all

cat /proc/sys/vm/mmap_min_addr

If it says 65536, you're safe. If it says 0, then you're vulnerable. To fix

Code: Select all

echo "65536" | sudo tee /proc/sys/vm/mmap_min_addr