Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.advocacy > #377164

Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one.

From Jim Polaski <jpolaski@linuxmail.org>
Newsgroups comp.os.linux.advocacy
Subject Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one.
Date 2016-10-21 16:10 +0000
Message-ID <e6usvlFdl31U2@mid.individual.net> (permalink)
References <e6umrcFb6l1U12@mid.individual.net> <nudden$iqk$1@dont-email.me>

Show all headers | View raw

On 2016-10-21, Silver Slimer <> wrote:
> On 2016-10-21 10:25 AM, Jim Polaski wrote:
>> http://arstechnica.com/security/2016/10/most-serious-linux-privilege-escalation-bug-ever-is-under-active-exploit/#p3
>> 
>> "Lurking in the kernel for nine years, flaw gives untrusted users 
>> unfettered root access."
>> 
>> 
>> "The in-the-wild attacks exploiting this specific vulnerability were 
>> found by Linux developer Phil Oester, according to an informational site 
>> dedicated to the vulnerability. It says Oester found the exploit using 
>> an HTTP packet capture, but the site doesn't elaborate. Update: In 
>> e-mails received about nine hours after this post went live, Oester 
>> wrote:
>> 
>>     Any user can become root in < 5 seconds in my testing, very 
>> reliably. Scary stuff.
>> 
>>     The vulnerability is easiest exploited with local access to a system 
>> such as shell accounts. Less trivially, any web server/application 
>> vulnerability which allows the attacker to upload a file to the impacted 
>> system and execute it also works.
>> 
>>     The particular exploit which was uploaded to my system was compiled 
>> with GCC 4.8.5 released 20150623, though this should not imply that the 
>> vulnerability was not available earlier than that date given its 
>> longevity. As to who is being targeted, anyone running Linux on a web 
>> facing server is vulnerable. "
>
> The many eyes of the Linux community failed again. They were probably
> too busy masturbating to the thought of Wretched Stallman covering his
> nude body in barbecue sauce.

It took 9 years for those many eyes to discover the security problem.
And when you think about it, the brightest and best of the Linux 
community are the ones working on the kernel, it only goes downhill from 
there regarding other parts of Linux.

Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 14:25 +0000
  Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-21 17:49 +0200
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:45 +0200
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:51 +0000
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:59 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:11 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-21 23:14 +0200
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:20 +0000
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:38 +0200
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-21 23:13 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:17 +0000
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:35 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Marek Novotny <marek.novotny@marspolar.com> - 2016-10-21 17:23 -0400
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:52 +0000
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:33 +0200
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Chris Ahlstrom <OFeem1987@teleworm.us> - 2016-10-22 08:19 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Marek Novotny <marek.novotny@marspolar.com> - 2016-10-22 08:33 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-22 09:23 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 15:48 +0200
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-22 10:02 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 16:07 +0200
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. William Poaster <wp@dev.null> - 2016-10-22 16:46 +0100
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-23 09:04 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-22 14:34 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. -hh <recscuba_google@huntzinger.com> - 2016-10-22 12:45 -0700
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Steve Carroll <frelwizzen@gmail.com> - 2016-10-22 12:10 -0700
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. William Poaster <wp@dev.null> - 2016-10-21 23:05 +0100
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Marek Novotny <marek.novotny@marspolar.com> - 2016-10-21 18:09 -0400
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. -hh <recscuba_google@huntzinger.com> - 2016-10-22 04:35 -0700
  Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-21 11:50 -0400
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 15:56 +0000
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-21 12:46 -0400
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:16 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-21 18:30 -0400
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 22:54 +0000
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 16:10 +0000
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. tmelmosfire <tmelmosfire@gmail.com> - 2016-10-21 09:34 -0700
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:43 +0200
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:45 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:47 +0200
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:52 +0000
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-21 19:31 -0600
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-22 01:46 +0000
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:30 +0200
                A Flounder is as Flounder does Chris Ahlstrom <OFeem1987@teleworm.us> - 2016-10-22 08:12 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-22 13:49 -0600
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-21 19:31 -0600
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-22 01:44 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-22 04:29 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:30 +0200
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-22 13:50 -0600
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Chris Ahlstrom <OFeem1987@teleworm.us> - 2016-10-22 08:11 -0400
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Godzilla <godzilla@lizardboss.invalid> - 2016-10-22 12:24 +0000

csiph-web