Suer une Fedora 12 (rawhide pour le moment) à jour de ce matin:
./run_null_exploits.sh
Compiling exp_cheddarbay.c...OK.
Compiling exp_ingom0wnar.c...OK.
Compiling exp_moosecox.c...OK.
Compiling exp_paokara.c...OK.
Compiling exp_powerglove.c...OK.
Compiling exp_therebel.c...OK.
Compiling exp_vmware.c...OK.
Compiling exp_wunderbar.c...OK.
[+] Personality set to: PER_SVR4
Pulseaudio is not suid root!
./run_nonnull_exploits.sh
Compiling exp_cheddarbay.c...OK.
Compiling exp_ingom0wnar.c...OK.
Compiling exp_moosecox.c...OK.
Compiling exp_paokara.c...OK.
Compiling exp_powerglove.c...OK.
Compiling exp_therebel.c...OK.
Compiling exp_vmware.c...OK.
Compiling exp_wunderbar.c...OK.
Choose your exploit:
[0] Ingo m0wnar: Linux 2.6.31 perf_counter local root (Ingo backdoor method)
[1] Exit
> 0
------------------------------------------------------------------------------
Before the Law stands a doorkeeper. To this doorkeeper there comes a man
from the country who begs for admittance to the Law. But the doorkeeper
says that he cannot admit the man at the moment. The man, on reflection,
asks if he will be allowed, then, to enter later. 'It is possible,' answers
the doorkeeper, 'but not at this moment.' Since the door leading into the
Law stands open as usual and the doorkeeper steps to one side, the man bends
down to peer through the entrance. When the doorkeeper sees that, he laughs
and says: 'If you are so strongly tempted, try to get in without my
permission. But note that I am powerful. And I am only the lowest
doorkeeper. From hall to hall, keepers stand at every door, one more
powerful than the other. And the sight of the third man is already more
than even I can stand.' These are difficulties which the man from the
country has not expected to meet, the Law, he thinks, should be accessible
to every man and at all times, but when he looks more closely at the
doorkeeper in his furred robe, with his huge, pointed nose and long, thin,
Tartar beard, he decides that he had better wait until he gets permission to
enter. The doorkeeper gives him a stool and lets him sit down at the side
of the door. There he sits waiting for days and years. He makes many
attempts to be allowed in and wearies the doorkeeper with his importunity.
The doorkeeper often engages him in brief conversation, asking him about his
home and about other matters, but the questions are put quite impersonally,
as great men put questions, and always conclude with the statement that the
man cannot be allowed to enter yet. The man, who has equipped himself with
many things for his journey, parts with all he has, however valuable, in the
hope of bribing the doorkeeper. The doorkeeper accepts it all, saying,
however, as he takes each gift: 'I take this only to keep you from feeling
that you have left something undone.' During all these long years the man
watches the doorkeeper almost incessantly. He forgets about the other
doorkeepers, and this one seems to him the only barrier between himself and
the Law. In the first years he curses his evil fate aloud; later, as he
grows old, he only mutters to himself. He grows childish, and since in his
prolonged study of the doorkeeper he has learned to know even the fleas in
his fur collar, he begs the very fleas to help him and to persuade the
doorkeeper to change his mind. Finally his eyes grow dim and he does not
know whether the world is really darkening around him or whether his eyes
are only deceiving him. But in the darkness he can now perceive a radiance
that streams inextinguishably from the door of the Law. Now his life is
drawing to a close. Before he dies, all that he has experienced during the
whole time of his sojourn condenses in his mind into one question, which he
has never yet put to the doorkeeper. He beckons the doorkeeper, since he
can no longer raise his stiffening body. The doorkeeper has to bend far
down to hear him, for the difference in size between them has increased very
much to the man's disadvantage. 'What do you want to know now?' asks the
doorkeeper, 'you are insatiable.' 'Everyone strives to attain the Law,'
answers the man, 'how does it come about, then, that in all these years no
one has come seeking admittance but me?' The doorkeeper perceives that the
man is nearing his end and his hearing is failing, so he bellows in his ear:
'No one but you could gain admittance through this door, since this door was
intended for you. I am now going to shut it.' --Kafka
------------------------------------------------------------------------------
[+] Resolved ima_audit to 0xc0acd58c
[+] Resolved ima_file_mmap to 0xc057da68
[+] Resolved ima_bprm_check to 0xc057da8d
[+] Resolved ima_path_check to 0xc057d742
[+] Resolved selinux_enforcing to 0xc0acb1f8
[+] Resolved selinux_enabled to 0xc097232c
[+] Resolved security_ops to 0xc0aca1cc
[+] Resolved default_security_ops to 0xc0971e4c
[+] Resolved sel_read_enforce to 0xc05714a3
[+] Resolved audit_enabled to 0xc0a6e46c
[+] Resolved commit_creds to 0xc0455765
[+] Resolved prepare_kernel_cred to 0xc04555c6
System is not vulnerable.
[^] # Re: Brad a publié son exploit
Posté par Mildred (site web personnel) . En réponse à la dépêche Faille locale dans les fonctions pipe_*_open() du noyau Linux. Évalué à 2.
./run_null_exploits.sh
Compiling exp_cheddarbay.c...OK.
Compiling exp_ingom0wnar.c...OK.
Compiling exp_moosecox.c...OK.
Compiling exp_paokara.c...OK.
Compiling exp_powerglove.c...OK.
Compiling exp_therebel.c...OK.
Compiling exp_vmware.c...OK.
Compiling exp_wunderbar.c...OK.
[+] Personality set to: PER_SVR4
Pulseaudio is not suid root!
./run_nonnull_exploits.sh
Compiling exp_cheddarbay.c...OK.
Compiling exp_ingom0wnar.c...OK.
Compiling exp_moosecox.c...OK.
Compiling exp_paokara.c...OK.
Compiling exp_powerglove.c...OK.
Compiling exp_therebel.c...OK.
Compiling exp_vmware.c...OK.
Compiling exp_wunderbar.c...OK.
Choose your exploit:
[0] Ingo m0wnar: Linux 2.6.31 perf_counter local root (Ingo backdoor method)
[1] Exit
> 0
------------------------------------------------------------------------------
Before the Law stands a doorkeeper. To this doorkeeper there comes a man
from the country who begs for admittance to the Law. But the doorkeeper
says that he cannot admit the man at the moment. The man, on reflection,
asks if he will be allowed, then, to enter later. 'It is possible,' answers
the doorkeeper, 'but not at this moment.' Since the door leading into the
Law stands open as usual and the doorkeeper steps to one side, the man bends
down to peer through the entrance. When the doorkeeper sees that, he laughs
and says: 'If you are so strongly tempted, try to get in without my
permission. But note that I am powerful. And I am only the lowest
doorkeeper. From hall to hall, keepers stand at every door, one more
powerful than the other. And the sight of the third man is already more
than even I can stand.' These are difficulties which the man from the
country has not expected to meet, the Law, he thinks, should be accessible
to every man and at all times, but when he looks more closely at the
doorkeeper in his furred robe, with his huge, pointed nose and long, thin,
Tartar beard, he decides that he had better wait until he gets permission to
enter. The doorkeeper gives him a stool and lets him sit down at the side
of the door. There he sits waiting for days and years. He makes many
attempts to be allowed in and wearies the doorkeeper with his importunity.
The doorkeeper often engages him in brief conversation, asking him about his
home and about other matters, but the questions are put quite impersonally,
as great men put questions, and always conclude with the statement that the
man cannot be allowed to enter yet. The man, who has equipped himself with
many things for his journey, parts with all he has, however valuable, in the
hope of bribing the doorkeeper. The doorkeeper accepts it all, saying,
however, as he takes each gift: 'I take this only to keep you from feeling
that you have left something undone.' During all these long years the man
watches the doorkeeper almost incessantly. He forgets about the other
doorkeepers, and this one seems to him the only barrier between himself and
the Law. In the first years he curses his evil fate aloud; later, as he
grows old, he only mutters to himself. He grows childish, and since in his
prolonged study of the doorkeeper he has learned to know even the fleas in
his fur collar, he begs the very fleas to help him and to persuade the
doorkeeper to change his mind. Finally his eyes grow dim and he does not
know whether the world is really darkening around him or whether his eyes
are only deceiving him. But in the darkness he can now perceive a radiance
that streams inextinguishably from the door of the Law. Now his life is
drawing to a close. Before he dies, all that he has experienced during the
whole time of his sojourn condenses in his mind into one question, which he
has never yet put to the doorkeeper. He beckons the doorkeeper, since he
can no longer raise his stiffening body. The doorkeeper has to bend far
down to hear him, for the difference in size between them has increased very
much to the man's disadvantage. 'What do you want to know now?' asks the
doorkeeper, 'you are insatiable.' 'Everyone strives to attain the Law,'
answers the man, 'how does it come about, then, that in all these years no
one has come seeking admittance but me?' The doorkeeper perceives that the
man is nearing his end and his hearing is failing, so he bellows in his ear:
'No one but you could gain admittance through this door, since this door was
intended for you. I am now going to shut it.' --Kafka
------------------------------------------------------------------------------
[+] Resolved ima_audit to 0xc0acd58c
[+] Resolved ima_file_mmap to 0xc057da68
[+] Resolved ima_bprm_check to 0xc057da8d
[+] Resolved ima_path_check to 0xc057d742
[+] Resolved selinux_enforcing to 0xc0acb1f8
[+] Resolved selinux_enabled to 0xc097232c
[+] Resolved security_ops to 0xc0aca1cc
[+] Resolved default_security_ops to 0xc0971e4c
[+] Resolved sel_read_enforce to 0xc05714a3
[+] Resolved audit_enabled to 0xc0a6e46c
[+] Resolved commit_creds to 0xc0455765
[+] Resolved prepare_kernel_cred to 0xc04555c6
System is not vulnerable.