CVE-2007-0253

The available connected documents identify a grsecurity patch vulnerability described as a privilege escalation related to an “expand_stack” issue. The CVE-2007-0253 description in the NVD/NVD-derived entries calls the vulnerability unspecified in impact and vectors, noting the grsecurity develop...

CVE-2007-0257: Undefined Security Weakness

Unspecified vulnerability in the expandstack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has...

PT-2007-1726 · Grsecurity · Grsecurity Patch

Name of the Vulnerable Software and Affected Versions: grsecurity patch affected versions not specified Description: The issue concerns an unspecified vulnerability in the grsecurity patch, which is reported to have remote attack vectors. However, the grsecurity developer has disputed this issue,...

CVE-2007-0253: Undefined Security Weakness

Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expandstack vulnerability from the Digital Armaments 20070110 pre-advisory. NOTE: the grsecurity developer has disputed this issue, stating that "the function the...

PT-2007-1729 · Grsecurity · Grsecurity Pax

Name of the Vulnerable Software and Affected Versions: grsecurity PaX affected versions not specified Description: The issue concerns an unspecified vulnerability in the expand stack function, potentially allowing local users to gain privileges through unspecified vectors. However, the grsecurity...

Grsecurity内核PaX本地权限提升漏洞

Grsecurity Linux是一款开放源代码操作系统。 Grsecurity的expandstack函数实现上存在漏洞，本地攻击者可能利用此漏洞以root用户权限执行任意指令。 grsecurity grsecurity Kernel Patch = 2.1.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.grsecurity.net/...

Digital Armaments Security Pre-Advisory 11.01.2007: Grsecurity Kernel PaX - Local root vulnerability

Digital Armaments pre-advisory is 01.10.2007 http://www.digitalarmaments.com/pre2007-00018659.html Digital Armaments realease pre-advisory of vulnerabilties and exploit avaiable only to Platinum Subscriptors. The full-advisory will might be released to the public after 6 months. I. Background...

Grsecurity Kernel PaX - Local Privilege Escalation

Grsecurity Kernel PaX - Local Privilege Escalation / source: https://www.securityfocus.com/bid/22014/info Grsecurity Kernel PaX is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to obtain superuser privileges. A successful attack can result in the complete...

Grsecurity Kernel PaX - Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/22014/info Grsecurity Kernel PaX is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to obtain superuser privileges. A successful attack can result in the complete compromise of the affected computer. NOTE: The...

GRSecurity Linux服务以高权限执行漏洞

BUGTRAQ ID: 16261 Grsecurity Linux是一款开放源代码操作系统。 Grsecurity Linux处理服务的运行权限时存在漏洞，某些情况下可能导致服务以不必要的高权限执行。 Grsecurity安全补丁可能错误地允许服务以高权限运行，如果从管理角色启动服务然后退出Shell的话，就会导致重启的服务仍然存在管理角色。 grsecurity grsecurity Kernel Patch = 2.1.7 grsecurity ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SA-03.txt

I'm proud to introduce an example of return into libc exploit which works though grsecurity patch protection. Please read source carefully and change some lines cause default version probably wont work on your machine. - This is example, remember it. ; / Grsecurity bypass tryout - system"/bin/sh"...

CVE-2006-0228

The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...

Design/Logic Flaw

The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...

CVE-2006-0228

The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...

CVE-2006-0228

CVE-2006-0228 involves the RBAC helper in grsecurity prior to 2.1.8, where the admin role can inadvertently remain active after the admin creates a service and exits the shell without unauthenticating. This causes the service to restart with the admin role still active, giving elevated privileges...

CVE-2006-0228: Undefined Security Weakness

The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...

[VulnWatch] ncompress insecure temporary file creation

ncompress insecure temporary file creation Vendor: ftp://ftp.leo.org/pub/comp/os/unix/linux/sunsite/utils/compress/ Advisory: http://www.zataz.net/adviso/ncompress-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary...

kpopper10.txt

kpopper insecure temporary file creation Vendor: http://kpopper.sourceforge.net/ Advisory: http://www.zataz.net/adviso/kpopper-06152005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. This...

[Full-disclosure] ekg insecure temporary file creation and arbitrary code execution

ekg insecure temporary file creation and arbitrary code execution Vendor: http://dev.null.pl/ekg/ Advisory: http://www.zataz.net/adviso/ekg-06062005.txt Vendor informed: yes Exploit available: no Impact : high Exploitation : high The vulnerabilities are caused due to temporary file being created...

CVE-2002-1826

The CVE-2002-1826 issue affects grsecurity 1.9.4 for the Linux kernel (2.4.18). Local users can bypass read-only protections by using mmap to directly map /dev/mem or /dev/kmem into kernel memory, as described in multiple sources (NVD/Red Hat/CVE lists). The connected documents provide the vulner...