EUVD-2009-1890

Malware in sbrugna...

Linux Kernel PER_CLEAR_ON_SETID personality bypass

No description provided by source. / 14.08.2009, babcia padlina vulnerability discovered by google security team some parts of exploit code borrowed from vmsplice exploit by qaaz persvr4 mmap zero technique developed by Julien Tinnes and Tavis Ormandy:...

Null pointer dereference

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to 1 conduct NULL...

CVE-2009-1895: Undefined Security Weakness

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to 1 conduct NULL...