GLSA-200402-06 : Updated kernel packages fix the AMD64 ptrace vulnerability

The remote host is affected by the vulnerability described in GLSA-200402-06 Updated kernel packages fix the AMD64 ptrace vulnerability A vulnerability has been discovered by Andi Kleen in the ptrace emulation code for AMD64 platforms when eflags are processed, allowing a local user to obtain...

Mandrake Linux Security Advisory : kernel (MDKSA-2004:015)

Paul Staretz discovered a flaw in return value checking in the mremap function in the Linux kernel, versions 2.4.24 and previous that could allow a local user to obtain root privileges. A vulnerability was found in the R128 DRI driver by Alan Cox. This could allow local privilege escalation. A fl...

Mandrake Linux Security Advisory : kernel (MDKSA-2001:082-1)

Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux kernels with the ptrace code and deeply nested symlinks spending an arbitrary amount of time in the kernel code. The ptrace vulnerability could be used by local users to gain root privilege, the symlink vulnerability could result...

SUSE-SA:2003:021: kernel

The remote host is missing the patch for the advisory SUSE-SA:2003:021 kernel. The Linux kernel has a security flaw in all versions used on SUSE products excluding the upcoming SUSE LINUX 8.2 distribution. The flaw is known as ptrace/modprobe bug: The local attacker can use ptrace and attach to a...

ptrace contains vulnerability allowing for local root compromise

Overview A vulnerability in the Linux 2.2 and 2.4 distributions of ptrace may permit a local attacker to gain elevated privileges. Description The Linux 2.2 and 2.4 kernels contained a flaw in ptrace. This vulnerability may permit a local user to have the kernel spawn a child process. From the ma...

Systrace 1.x - Local Policy Bypass

// source: https://www.securityfocus.com/bid/9998/info Systrace has been reported prone to a vulnerability that may permit an application to completely bypass a Systrace policy. The issue presents itself because Systrace does not perform sufficient sanity checks while handling a process that is...

Updated kernel packages fix the AMD64 ptrace vulnerability

Background Description A vulnerability has been discovered by Andi Kleen in the ptrace emulation code for AMD64 platforms when eflags are processed, allowing a local user to obtain elevated priveleges. The Common Vulnerabilities and Exposures project, http://cve.mitre.org, has assigned...

security flaw

Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges...

FreeBSD signal DoS

ptrace and spigot device allow to generate signal with negative or out of range valur leading to system panic...

FreeBSD-SA-03:09.signal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:09.signal Security Advisory The FreeBSD Project Topic: Insufficient range checking of signal numbers Category: core Module: sys Announced: 2003-08-10 Affects:...

2.4.21 kernels available

Precompiled Linux 2.4.21 kernels and source packages are now available for Slackware 9.0 and -current. These provide an improved version of the ptrace fix that had been applied to 2.4.20 in Slackware 9.0 for example, command line options now appear correctly when root does 'ps ax', and fix a...

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation (2)

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation 2 / source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process,...

Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (2)

/ source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain...

CVE-2003-0127

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel...

Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit

Exploit for linux platform in category local exploits ========================================================= Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit ========================================================= / Linux kernel ptrace/kmod local root exploit This code exploits a ra...

Linux Kernel 2.2.x2.4.x (RedHat) - ptracekmod Local Privilege Escalation

Linux Kernel 2.2.x2.4.x RedHat - ptracekmod Local Privilege Escalation / Linux kernel ptrace/kmod local root exploit This code exploits a race condition in kernel/kmod.c, which creates kernel thread in insecure manner. This bug allows to ptrace cloned process, allowing to take control over...

Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation

/ Linux kernel ptrace/kmod local root exploit This code exploits a race condition in kernel/kmod.c, which creates kernel thread in insecure manner. This bug allows to ptrace cloned process, allowing to take control over privileged modprobe binary. Should work under all current 2.2.x and 2.4.x...

DSA-270 linux-kernel-mips - local privilege escalation

Bulletin has no description...

Multiple linux kernel problems

Standard bug set: problems with ptrace, mmap and ethernet drivers...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...