提醒Debian用户Linux提权漏洞

fred_56

debian:~# mv full-nelson.c ~wq/
debian:~# chown wq:wq ~wq/full-nelson.c
debian:~# su wq
wq@debian:/root$ cd
wq@debian:~$ ls
full-nelson.c  linux/
wq@debian:~$ gcc full-nelson.c
wq@debian:~$ ./a.out
[*] Failed to open file descriptors.
wq@debian:~$ gcc full-nelson.c -o full-nelson
wq@debian:~$ ./full-nelson
[*] Failed to open file descriptors.
wq@debian:~$ uname -r
2.6.28.2-usbboot
wq@debian:~$ grep commit_creds /proc/kallsyms
wq@debian:~$ grep prepare_kernel_cre /proc/kallsyms
wq@debian:~$

sysulzh

跟楼上一样的结果，不知是否少了什么步骤？

$gcc full-nelson.c -o full-nelson
$./full-nelson
[*] Failed to open file descriptors.
$uname -a
Linux eg2004 2.6.36 #2 SMP Sun Nov 21 10:27:02 HKT 2010 i686 GNU/Linux
$more /etc/debian_version
squeeze/sid
$

shappen

[*] Failed to open file descriptors.


测试不通过

abc@debian:/tmp$ uname -a
Linux debian 2.6.32-5-686 #1 SMP Fri Dec 10 16:12:40 UTC 2010 i686 GNU/Linux

zhanglistar

利用了 Linux Econet 协议的3个安全漏洞，可以导致本地帐号对系统进行拒绝服务或特权提升
dreamice 发表于 2010-12-24 09:13

    影响ubuntu用户不？？？？