Mandrake Linux Security Advisory : kernel (MDKSA-2001:082-1)

Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux kernels with the ptrace code and deeply nested symlinks spending an arbitrary amount of time in the kernel code. The ptrace vulnerability could be used by local users to gain root privilege, the symlink vulnerability could result...

SUSE-SA:2003:021: kernel

The remote host is missing the patch for the advisory SUSE-SA:2003:021 kernel. The Linux kernel has a security flaw in all versions used on SUSE products excluding the upcoming SUSE LINUX 8.2 distribution. The flaw is known as ptrace/modprobe bug: The local attacker can use ptrace and attach to a...

ptrace contains vulnerability allowing for local root compromise

Overview A vulnerability in the Linux 2.2 and 2.4 distributions of ptrace may permit a local attacker to gain elevated privileges. Description The Linux 2.2 and 2.4 kernels contained a flaw in ptrace. This vulnerability may permit a local user to have the kernel spawn a child process. From the ma...

Systrace 1.x - Local Policy Bypass

// source: https://www.securityfocus.com/bid/9998/info Systrace has been reported prone to a vulnerability that may permit an application to completely bypass a Systrace policy. The issue presents itself because Systrace does not perform sufficient sanity checks while handling a process that is...

Updated kernel packages fix the AMD64 ptrace vulnerability

Background Description A vulnerability has been discovered by Andi Kleen in the ptrace emulation code for AMD64 platforms when eflags are processed, allowing a local user to obtain elevated priveleges. The Common Vulnerabilities and Exposures project, http://cve.mitre.org, has assigned...

security flaw

Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges...

FreeBSD signal DoS

ptrace and spigot device allow to generate signal with negative or out of range valur leading to system panic...

FreeBSD-SA-03:09.signal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:09.signal Security Advisory The FreeBSD Project Topic: Insufficient range checking of signal numbers Category: core Module: sys Announced: 2003-08-10 Affects:...

2.4.21 kernels available

Precompiled Linux 2.4.21 kernels and source packages are now available for Slackware 9.0 and -current. These provide an improved version of the ptrace fix that had been applied to 2.4.20 in Slackware 9.0 for example, command line options now appear correctly when root does 'ps ax', and fix a...

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation (2)

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation 2 / source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process,...

Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (2)

/ source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain...

CVE-2003-0127

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel...

Linux Kernel 2.2.x2.4.x (RedHat) - ptracekmod Local Privilege Escalation

Linux Kernel 2.2.x2.4.x RedHat - ptracekmod Local Privilege Escalation / Linux kernel ptrace/kmod local root exploit This code exploits a race condition in kernel/kmod.c, which creates kernel thread in insecure manner. This bug allows to ptrace cloned process, allowing to take control over...

Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit

Exploit for linux platform in category local exploits ========================================================= Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit ========================================================= / Linux kernel ptrace/kmod local root exploit This code exploits a ra...

Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation

/ Linux kernel ptrace/kmod local root exploit This code exploits a race condition in kernel/kmod.c, which creates kernel thread in insecure manner. This bug allows to ptrace cloned process, allowing to take control over privileged modprobe binary. Should work under all current 2.2.x and 2.4.x...

DSA-270 linux-kernel-mips - local privilege escalation

Bulletin has no description...

Multiple linux kernel problems

Standard bug set: problems with ptrace, mmap and ethernet drivers...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

CVE-2002-1409

CVE-2002-1409 affects HP-UX 11.00 through 11.11, where ptrace handling allows a local user to trigger a denial-of-service (data page fault panic) via an incorrect reference to thread register state. The available documents confirm the affected platform and the root cause (ptrace thread-state refe...

CVE-2003-0127

CVE-2003-0127 affects the Linux kernel 2.2.x before 2.2.25 and 2.4.x before 2.4.21. A local attacker can gain root privileges by using ptrace to attach to a child process spawned by the kernel. The description explicitly states the root cause is the kernel module loader’s handling of ptrace with ...