Messages in this thread | ![/](/images/icornerl.gif) | | From | mlafon@arkoon ... | Date | Wed, 19 Mar 2003 12:28:02 +0100 | Subject | Re: Ptrace hole / Linux 2.2.25 |
| |
Alan Cox wrote: > Vulnerability: CAN-2003-0127
> The Linux 2.2 and Linux 2.4 kernels have a flaw in ptrace. This hole allows > local users to obtain full privileges. Remote exploitation of this hole is > not possible. Linux 2.5 is not believed to be vulnerable.
The patch breaks /proc/<pid>/cmdline and /proc/<pid>/environ for 'non dumpable' processes, even for root.
We need to access theses proc files for processes monitoring.
Included is a patch to restore this functionnality for root.
Any comments ? (See attached file: cmdline_environ_fix.diff) -- Mathieu Lafon - Arkoon Network Security [unhandled content-type:application/octet-stream]
| ![\](/images/icornerr.gif) |