Re: [DSA 1494-1] Still vulnerable?

2008-02-13 Thread Noah Meyerhans
On Wed, Feb 13, 2008 at 06:23:16PM -0200, Martin Spinassi wrote: I just upgraded my linux-source-2.6.18 to 2.6.18.dfsg.1-18etch1_all and build a new linux-image. But after installing an rebooting I still was able to become root with this exploit: http://milw0rm.com/exploits/5092

Re: [DSA 1494-1] Still vulnerable?

2008-02-12 Thread Jens Schüßler
* Florian Weimer [EMAIL PROTECTED] wrote: * Jens Schüßler: I just upgraded my linux-source-2.6.18 to 2.6.18.dfsg.1-18etch1_all and build a new linux-image. But after installing an rebooting I still was able to become root with this exploit: http://milw0rm.com/exploits/5092 Can

Re: [DSA 1494-1] Still vulnerable?

2008-02-12 Thread Michel Messerschmidt
On Tue, Feb 12, 2008 at 09:18:30PM +0100, Jens Schüßler wrote: * Florian Weimer [EMAIL PROTECTED] wrote: Not in our tests. Are you sure you're running the new kernel? What does uname -a say? $uname -a Linux algol 2.6.18+2008-02-12 #1 Tue Feb 12 16:49:10 CET 2008 i686 GNU/Linux As I

Re: [DSA 1494-1] Still vulnerable?

2008-02-12 Thread Stefan Fritsch
On Tuesday 12 February 2008, Jens Schüßler wrote: * Florian Weimer [EMAIL PROTECTED] wrote: * Jens Schüßler: I just upgraded my linux-source-2.6.18 to 2.6.18.dfsg.1-18etch1_all and build a new linux-image. But after installing an rebooting I still was able to become root with this

Re: [DSA 1494-1] Still vulnerable?

2008-02-12 Thread Michel Messerschmidt
On Tue, Feb 12, 2008 at 09:18:30PM +0100, Jens Schüßler wrote: * Florian Weimer [EMAIL PROTECTED] wrote: Not in our tests. Are you sure you're running the new kernel? What does uname -a say? $uname -a Linux algol 2.6.18+2008-02-12 #1 Tue Feb 12 16:49:10 CET 2008 i686 GNU/Linux As I

Re: [DSA 1494-1] Still vulnerable?

2008-02-12 Thread Jens Schüßler
* Michel Messerschmidt [EMAIL PROTECTED] wrote: On Tue, Feb 12, 2008 at 09:18:30PM +0100, Jens Schüßler wrote: * Florian Weimer [EMAIL PROTECTED] wrote: Not in our tests. Are you sure you're running the new kernel? What does uname -a say? $uname -a Linux algol 2.6.18+2008-02-12 #1

Re: [DSA 1494-1] Still vulnerable?

2008-02-12 Thread Florian Weimer
* Jens Schüßler: Not in our tests. Are you sure you're running the new kernel? What does uname -a say? $uname -a Linux algol 2.6.18+2008-02-12 #1 Tue Feb 12 16:49:10 CET 2008 i686 GNU/Linux As I said, fresh compiled from the new sources-Packet Please send me your copy of fs/splice.c.