Debian Bug report logs - #308759
CAN-2005-1263: Linux kernel ELF core dump privilege elevation

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <muehlenhoff@univention.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: CAN-2005-1263: Linux kernel ELF core dump privilege elevation

Date: Thu, 12 May 2005 09:13:48 +0200

[Message part 1 (text/plain, inline)]

Package: kernel-source-2.4.27
Version: unavailable; reported 2005-05-12
Severity: grave
Tags: security patch

Paul Starzetz has found another flaw in the Linux kernel that can be exploited
to gain extended local privileges. Please see his detailed advisory at
http://isec.pl/vulnerabilities/isec-0023-coredump.txt

Greg Kroah-Hartman has posted a patch for 2.6, which should apply to 2.4 as
well. It's attached.

Cheers,
        Moritz

-- System Information:
Debian Release: 3.0
Architecture: i386
Kernel: Linux anton 2.4.29-univention.1 #1 SMP Thu Jan 27 17:08:46 CET 2005 i686
Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro

[/home/jmm/CAN-2005-1263-kernel-local-privilege-escalation.patch (text/x-c, attachment)]

Message #10 received at 308757@bugs.debian.org (full text, mbox, reply):

From: Horms <horms@debian.org>

To: Samuli Suominen <sasuomin@uusikaupunki.fi>, 308634@bugs.debian.org, Justin Pryzby <justinpryzby@users.sourceforge.net>, 308724@bugs.debian.org, Moritz Muehlenhoff <muehlenhoff@univention.de>, 308757@bugs.debian.org

Subject: Re: Bug#308634: kernel-source-2.6.8: A locally exploitable flaw to gain root.

Date: Thu, 12 May 2005 16:33:04 +0900

tag 308724 +pending
tag 308634 +pending
thanks

The fix for CAN-2005-1263 fix is now in SVN for 2.6.8 and I will add 
it to 2.4.27 shortly.

-- 
Horms

Message #17 received at 308759-done@bugs.debian.org (full text, mbox, reply):

From: muehlenhoff@univention.de (Moritz Mühlenhoff)

To: 308759-done@bugs.debian.org

Subject: This has already been fixed

Date: Mon, 30 May 2005 08:57:03 +0200

This bug can be closed. It has already been fixed as 308757 in
2.4.27-10.

Cheers,
        Moritz
-- 
Moritz Muehlenhoff muehlenhoff@univention.de     fon: +49 421 22 232- 0
Development        Linux for Your Business       fax: +49 421 22 232-99
Univention GmbH    http://www.univention.de/   mobil: +49 175 22 999 23

Send a report that this bug log contains spam.