GRSecurity Elevated Service Privileges Weakness
BID:16261
Info
GRSecurity Elevated Service Privileges Weakness
| Bugtraq ID: | 16261 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 16 2006 12:00AM |
| Updated: | Jan 16 2006 12:00AM |
| Credit: | Julien Tinnes reported this issue to the vendor. |
| Vulnerable: |
grsecurity grsecurity Kernel Patch 2.1.7 grsecurity grsecurity Kernel Patch 2.1.6 grsecurity grsecurity Kernel Patch 2.1.5 grsecurity grsecurity Kernel Patch 2.1.4 grsecurity grsecurity Kernel Patch 2.1.3 grsecurity grsecurity Kernel Patch 2.1.2 grsecurity grsecurity Kernel Patch 2.1.1 grsecurity grsecurity Kernel Patch 2.1 .0 grsecurity grsecurity Kernel Patch 2.0.2 grsecurity grsecurity Kernel Patch 2.0.1 |
| Not Vulnerable: |
grsecurity grsecurity Kernel Patch 2.1.8 |
Discussion
GRSecurity Elevated Service Privileges Weakness
The grsecurity patch may improperly allow services to run with elevated privileges. This issue is due to a failure of the kernel to properly drop administrative roles.
This issue may lead to a false sense of security by allowing network services that are intended to have limited privileges to have administrative privileges. The exact repercussions of this issue depend on the particular function of the services running with elevated privileges. Privileges granted to services depend on the configured administrative role.
Attackers may exploit latent vulnerabilities in network services, and compromise the underlying computer. This is due to the targeted service having elevated privileges that are not intended.
The grsecurity patch may improperly allow services to run with elevated privileges. This issue is due to a failure of the kernel to properly drop administrative roles.
This issue may lead to a false sense of security by allowing network services that are intended to have limited privileges to have administrative privileges. The exact repercussions of this issue depend on the particular function of the services running with elevated privileges. Privileges granted to services depend on the configured administrative role.
Attackers may exploit latent vulnerabilities in network services, and compromise the underlying computer. This is due to the targeted service having elevated privileges that are not intended.
Exploit / POC
GRSecurity Elevated Service Privileges Weakness
An exploit may, or may not be required, depending on the nature of targeted vulnerabilities in services running on affected computers.
An exploit may, or may not be required, depending on the nature of targeted vulnerabilities in services running on affected computers.
Solution / Fix
GRSecurity Elevated Service Privileges Weakness
Solution:
The vendor has released version 2.1.8 to address this issue. Users of affected packages should visit the referenced download page to retrieve fixes.
Solution:
The vendor has released version 2.1.8 to address this issue. Users of affected packages should visit the referenced download page to retrieve fixes.
References
GRSecurity Elevated Service Privileges Weakness
References:
References:
- grsecurity 2.1.8 released for 2.4.32/2.6.14.6 (grsecurity)
- grsecurity Download Page (grsecurity)
- Homepage (grsecurity)