Re: Solaris libc exploit

From: Doug Granzow (dgranzowat_private)
Date: Tue May 25 1999 - 12:13:17 PDT

  • Next message: Mike Oliver: "Re: NetBSD Security Advisory 1999-010"

    >From the testing I've done, the original exploit posted by UNYUN only
    works on unpatched 2.6 systems, but acpizer's modification, which allows
    you to specify an offset, works on any 2.6 or 2.7 system if you use the
    right offset.  I found that using an offset of (I believe) 7144 works on a
    2.6 system with patch 105210-19 installed.
    
    Doug
    
    
    On Tue, 25 May 1999, Wyman Eric Miles wrote:
    
    > Correct me if I'm wrong, but doesn't 105210-06 or higher address this
    > under 2.6?  I've been unable to get the exploit to work on any patched
    > system, though it works nicely on any architecture I've tried which
    > doesn't have the patch.
    >
    > Wyman
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:47:07 PDT