All of lore.kernel.org
 help / color / mirror / Atom feed
From: "szonyi calin" <caszonyi@yahoo.com>
To: Jesper Juhl <juhl-lkml@dif.dk>, linux-kernel@vger.kernel.org
Cc: Bastiaan Spandaw <lkml@becobaf.com>,
	Tomas Szepe <szepe@pinerecords.com>,
	Max Valdez <maxvalde@fis.unam.mx>
Subject: Re: 2.6.1-rc1 affected?
Date: Tue, 6 Jan 2004 03:47:23 +0100 (CET)	[thread overview]
Message-ID: <20040106024723.4579.qmail@web40605.mail.yahoo.com> (raw)
In-Reply-To: <Pine.LNX.4.56.0401060221170.7597@jju_lnx.backbone.dif.dk>

 --- Jesper Juhl <juhl-lkml@dif.dk> a écrit : > 
> On Tue, 6 Jan 2004, Max Valdez wrote:
> 
> > At least it hangs a redhat 7.2 kernel
> >
> > I will test it further tomorrow, but it looks like a good
> proof to me
> >
> > > >
> > > > > There _is_ an exploit:
> > http://isec.pl/vulnerabilities/isec-0013-mremap.txt
> > > > > "Since no special privileges are required to use the
> mremap(2)
> > system
> > > > ...
> > > >
> > > > I will not believe the claim until I've seen the code.
> > >
> > > Not sure if this works or not.
> > > According to a slashdot comment this is proof of concept
> code.
> > >
> > > http://linuxfromscratch.org/~devine/mremap_poc.c
> > >
> > > Regards,
> > >
> > > Bastiaan
> > >
> 
> On my box that program is a very effective 'instant reboot'.
> 

on mine just a segfault :-)
sony@grinch -04:47:32- 0 jobs, ver 2.05b.0 3 
 /~/schule $ gcc -o mremap_poc mremap_poc.c 
sony@grinch -04:47:35- 0 jobs, ver 2.05b.0 3 
 /~/schule $ ./mremap_poc 
Segmentation fault

> The instant I ran it from a xterm my screen went black, the
> music I was
> listening to from a CD stopped and the machine rebooted.
> The running kernel was 2.6.1-rc1-mm1
> 

maybe you were running the program as root ?

> 
> - Jesper Juhl
> 
> -

Calin

=====
--
A mouse is a device used to point at 
the xterm you want to type in.
Kim Alm on a.s.r.

_________________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com

  parent reply	other threads:[~2004-01-06  2:47 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-01-05 16:31 2.6.1-rc1 affected? Markus Hästbacka
2004-01-05 16:41 ` [patchlet link] " Maciej Soltysiak
2004-01-05 16:46 ` Linus Torvalds
2004-01-05 18:14   ` Markus Hästbacka
2004-01-05 18:31     ` Linus Torvalds
2004-01-05 19:04       ` Markus Hästbacka
2004-01-05 19:38       ` GCS
2004-01-05 22:48         ` Tomas Szepe
2004-01-06  0:23           ` Bastiaan Spandaw
2004-01-06  1:09             ` Max Valdez
2004-01-06  1:25               ` Jesper Juhl
2004-01-06  1:31                 ` Hugang
2004-01-06  1:43                   ` Hugang
2004-01-06  2:47                 ` szonyi calin [this message]
2004-01-06  3:24                   ` Jonathan Higdon
2004-01-06  3:51                     ` szonyi calin
2004-01-06  6:39             ` Jakob Oestergaard
2004-01-06  9:26               ` Giuliani Ivan
     [not found] <1aFW7-39l-11@gated-at.bofh.it>
     [not found] ` <1aG5G-3mf-21@gated-at.bofh.it>
2004-01-06 12:44   ` Michal Schmidt

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20040106024723.4579.qmail@web40605.mail.yahoo.com \
    --to=caszonyi@yahoo.com \
    --cc=juhl-lkml@dif.dk \
    --cc=linux-kernel@vger.kernel.org \
    --cc=lkml@becobaf.com \
    --cc=maxvalde@fis.unam.mx \
    --cc=szepe@pinerecords.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.