All sysop must consider this advisory!!! Tested and really dangerous!
>From kernel 2.6.17 - 2.6.24 Greetz. On Tue, 2008-02-12 at 11:28 -0500, rPath Update Announcements wrote: > rPath Security Advisory: 2008-0052-1 > Published: 2008-02-12 > Products: > rPath Linux 1 > rPath Appliance Platform Linux Service 1 > > Rating: Critical > Exposure Level Classification: > Local Root Deterministic Privilege Escalation > Updated Versions: > [EMAIL PROTECTED]:1-vmware/2.6.22.18-0.1-1 > [EMAIL PROTECTED]:1/2.6.22.18-0.1-1 > [EMAIL PROTECTED]:linux-1/2.6.22.18-1-1 > > rPath Issue Tracking System: > https://issues.rpath.com/browse/RPL-2237 > > References: > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0600 > > Description: > Previous versions of the Linux kernel package are vulnerable to > a local user privilege escalation vulnerability that is widely > publicized and being actively exploited. All users are encouraged > to update their systems immediately. > > This vulnerability was introduced in the 2.6.17 kernel; the > kernels on the [EMAIL PROTECTED]:1-xen label are not affected. > > A system reboot is required to resolve this vulnerability. > > http://wiki.rpath.com/Advisories:rPSA-2008-0052 > > Copyright 2008 rPath, Inc. > This file is distributed under the terms of the MIT License. > A copy is available at http://www.rpath.com/permanent/mit-license.html > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
