Linux ldd core Vulnerability
BID:344
Info
Linux ldd core Vulnerability
| Bugtraq ID: | 344 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-1999-0400 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 26 1999 12:00AM |
| Updated: | Jul 11 2009 12:16AM |
| Credit: | First posted to the Linux Kernel Mailing List by Dan Burcaw on January 26, 1999. |
| Vulnerable: |
Linux kernel 2.2 |
| Not Vulnerable: | |
Discussion
Linux ldd core Vulnerability
Due to a rare and subtle bug in the 2.2.0 kernel, a linux machine can be forced to reboot by an unpriviliged local user. The reason for this is because of the invalid ELF core layout and the fact that munmap wipes out a vital page table entry.
Only kernel 2.2.0 is vulnerable to this.
Due to a rare and subtle bug in the 2.2.0 kernel, a linux machine can be forced to reboot by an unpriviliged local user. The reason for this is because of the invalid ELF core layout and the fact that munmap wipes out a vital page table entry.
Only kernel 2.2.0 is vulnerable to this.
Exploit / POC
Linux ldd core Vulnerability
Take any core file,
[user@box tmp]$ ldd core
[reboot]
Take any core file,
[user@box tmp]$ ldd core
[reboot]
Solution / Fix
Linux ldd core Vulnerability
Solution:
Upgrade to any linux kernel above 2.2.0.
Solution:
Upgrade to any linux kernel above 2.2.0.