[pso] New Linux Flaw Enables Null Pointer Exploits

George Milescu george.milescu at gmail.com
Mon Jul 20 14:32:39 EEST 2009


Salut.

Versiunile de kernel 2.6.30 si 2.6.30.1 sunt afectate de o
vulnerabilitate care permite rularea de cod arbitrar, trecand de
protectiile SELinux si AppArmor. [1]

E interesanta cauza pentru care apare gaura de securitate: "the
compiler will introduce the vulnerability to the binary code, which
didn't exist in the source code".

[1] http://threatpost.com/blogs/researcher-uses-new-linux-kernel-flaw-bypass-selinux-other-protections

-- 
George Milescu


More information about the pso mailing list