{"id":378,"date":"2006-07-18T10:57:26","date_gmt":"2006-07-18T08:57:26","guid":{"rendered":"http:\/\/gnu.inter.it\/blogs\/fabio\/2006\/07\/18\/378\/"},"modified":"2006-07-18T17:18:41","modified_gmt":"2006-07-18T15:18:41","slug":"378","status":"publish","type":"post","link":"https:\/\/fabioinvernizzi.com\/blog\/2006\/07\/18\/378\/","title":{"rendered":"h00lyshit"},"content":{"rendered":"

azz… me ne sto’ in ferie una settimana ed esce uno degli 0day peggiori degli ultimi tempi :-\/<\/p>\n

<\/p>\n

\r\nfabio@gnu:~$ .\/h00lyshit \/opt\/movie\/stallman\/stallman_20050224.avi\r\n\r\npreparing\r\ntrying to exploit \/opt\/movie\/stallman\/stallman_20050224.avi\r\n\r\nsh-3.1# id\r\nuid=0(root) gid=1000(fabio)\r\ngroups=4(adm),24(cdrom),29(audio),44(video),112(scard),1000(fabio),9904(grtpe)\r\nsh-3.1# exit\r\n<\/pre>\n
<\/code><\/p>\n
FIX: (fino alla ricompilazione del kernel)
\n<\/p>\n
\r\nfabio@gnu:~$ sudo mount -o remount,nosuid \/proc\/\r\nPassword:\r\nfabio@gnu:~$ .\/h00lyshit \/opt\/movie\/stallman\/stallman_20050224.avi\r\n\r\npreparing\r\ntrying to exploit \/opt\/movie\/stallman\/stallman_20050224.avi\r\n\r\nsh-3.1$ id\r\nuid=1000(fabio) gid=1000(fabio)\r\ngroups=4(adm),24(cdrom),29(audio),44(video),112(scard),1000(fabio),9904(grtpe)\r\n\r\n<\/pre>\n
<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"
azz… me ne sto’ in ferie una settimana ed esce uno degli 0day peggiori degli ultimi tempi :-\/ fabio@gnu:~$ .\/h00lyshit \/opt\/movie\/stallman\/stallman_20050224.avi preparing trying to exploit \/opt\/movie\/stallman\/stallman_20050224.avi sh-3.1# id uid=0(root) gid=1000(fabio) groups=4(adm),24(cdrom),29(audio),44(video),112(scard),1000(fabio),9904(grtpe) sh-3.1# exit FIX: (fino alla ricompilazione del kernel) fabio@gnu:~$ sudo mount -o remount,nosuid \/proc\/ Password: fabio@gnu:~$ .\/h00lyshit \/opt\/movie\/stallman\/stallman_20050224.avi preparing trying to exploit \/opt\/movie\/stallman\/stallman_20050224.avi sh-3.1$ … Continue reading h00lyshit<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[2],"tags":[3],"class_list":["post-378","post","type-post","status-publish","format-standard","hentry","category-me","tag-hacking"],"_links":{"self":[{"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/posts\/378"}],"collection":[{"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/comments?post=378"}],"version-history":[{"count":0,"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/posts\/378\/revisions"}],"wp:attachment":[{"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/media?parent=378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/categories?post=378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fabioinvernizzi.com\/blog\/wp-json\/wp\/v2\/tags?post=378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}