Date: Mon, 25 Feb 2013 20:12:08 +0400 From: Solar Designer <solar@...nwall.com> To: oss-security@...ts.openwall.com Subject: Re: CVE Request: kernel - sock_diag: Fix out-of-bounds access to sock_diag_handlers On Mon, Feb 25, 2013 at 11:41:33AM +0100, Mathias Krause wrote: > But sorry, I won't disclose any further details, to not get into legal > issues. In Germany it's quite hairy to do things like that :/ > But I can provide you my PoC in a private email -- for security evaluation. This is not necessary since we don't use these "too recent" kernels, but thanks for offering. Here's a curious tweet: <_argp> Since full-disclosure has been DDoSed to oblivion, here's huku's sock_diag 1 year-old exploit: http://pastebin.com/gwn1qErx The pastebin has: --- Who the fuck DDoS'ed full-disclosure? ;) http://sysc.tl/mpougatsa_me_krema_kai_milko.tgz ---------- Forwarded message ---------- From: huku <huku@...ack.net> Date: Mon, 25 Feb 2013 01:18:38 +0200 Subject: CVE-2013-1763 local root exploit To: full-disclosure@...ts.grok.org.uk Greetings fly to Daphne Rosen, Gianna Michaels and Carmella Bing. ./hk --- SHA-1: c5904fdaea3e212bb84592e6e2ce3a640b14308c mpougatsa_me_krema_kai_milko.tgz Two of the files in the tarball have timestamps of 2012-07-14. Of course, this is no proof, but it does appear that the bug was privately known since about July 2012. The README says: "A trimmed down version of an old exploit for the recently published `sock_diag_handlers' vulnerability :(" The code contains: printf("Linux kernel >= 3.2 NETLINK_INET_DIAG 0day\n"); printf("by huku <huku _at_ grhack _dot_ net>\n"); Is ">= 3.2" an error (should have been ">= 3.3" as your original posting in here said)? (The difference may be whether Ubuntu 12.04 is affected.) Alexander
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.