sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] Linux kernel uselib() privilege elevation in kernel 2.4 and 2.6

From: Thomas HOUSSIN <thomas.houssin AT gmail.com>
To: sm-security <sm-security AT lists.ibiblio.org>
Subject: [SM-Security] Linux kernel uselib() privilege elevation in kernel 2.4 and 2.6
Date: Mon, 10 Jan 2005 14:47:59 +0100

Security flaw in 2.4 and 2.6 ; allows local users to gain root privileges.
http://isec.pl/vulnerabilities/isec-0021-uselib.txt

Attached a patch from gentoo :
http://dev.gentoo.org/~dsd/gentoo-dev-sources/release-10.03/dist/1115_sys-uselib-fix.patch

Thanks to linuxfr.org for signaling this.

Synopsis: Linux kernel uselib() privilege elevation
Product: Linux kernel
Version: 2.2 all versions, 2.4 up to and including 2.4.29-pre3, 2.6 up
to and including 2.6.10
Vendor: http://www.kernel.org/
URL: http://isec.pl/vulnerabilities/isec-0021-uselib.txt
CVE: CAN-2004-1235
Author: Paul Starzetz <ihaquer AT isec.pl>
Date: Jan 07, 2005
Updated: Jan 09, 2005

Issue:
======

Locally exploitable flaws have been found in the Linux binary format
loaders' uselib() functions that allow local users to gain root
privileges.

--
"[...] Tantôt sonnera l'heure où le divin Hasard,
Où l'auguste Vertu, ton épouse encor vierge,
Où le Repentir même (oh ! La dernière auberge !),
Où tout te dira : Meurs, vieux lâche ! Il est trop tard ! "

de Charles Baudelaire, "L'Horloge"

Attachment: 1115_sys-uselib-fix.patch
Description: Binary data

[SM-Security] Linux kernel uselib() privilege elevation in kernel 2.4 and 2.6, Thomas HOUSSIN, 01/10/2005