Re: latest ptrace hole patch?

From: Anders Gustafsson (andersg@0x63.nu)
Date: 03/20/03

  • Next message: Klotz, Brian: "Seeing who has su-ed" 
    Date: Thu, 20 Mar 2003 21:22:06 +0100
To: SB CH <chulmin2@hotmail.com>
From: Anders Gustafsson <andersg@0x63.nu>

    On Thu, Mar 20, 2003 at 02:19:46PM +0000, SB CH wrote:
    > Hello, list.
    >
    > anyone who succeed the patch against the latest ptrace security hole?
    > I did alan's patch but I can't patch against 2.4.20 anymore becaus of lots
    > of errors.
    > I downloaded the patch at /usr/src/linux/
    > and patch -p1 < downloaded_alan's_patch.
    > But lots of errors occurred.

    Take this one, it applies cleanly to a fresh 2.4.20

    http://www.hardrock.org/kernel/2.4.20/linux-2.4.20-ptrace.patch

    Also keep in mind that most exploits out there sets the +s bit of the
    exploit-binary. 

    -- 
Anders Gustafsson - andersg@0x63.nu - http://0x63.nu/
  • Next message: Klotz, Brian: "Seeing who has su-ed"

    Relevant Pages