Bug in latest Linux gives untrusted users root access

post Category: Linux — sokdbot @ 3:20 am — post Comments (0)
postNovember 4, 2009

A software developer has uncovered a bug in most versions of Linux that could allow untrusted users to gain complete control over the open-source operating system. The null pointer dereference flaw was only fixed in the upcoming 2.6.32 release candidate of the Linux kernel, making virtually all production versions in use at the moment vulnerable. While attacks can be prevented by implementing a common feature known as mmap_min_addr, the RHEL distribution, short for Red Hat Enterprise Linux, doesnt properly implement that protection, Brad Spengler, who discovered the bug in mid October, told The Register.

Link to original article

Rate this post:

There are no related posts to this one. Have some randomness:

`
«
»

No comments yet. Be the first!

Write Your Comment

Comment Guidelines: Basic XHTML is allowed (a href, strong, em, code). All line breaks and paragraphs will be generated automatically.

You should have a name, right? 
Your email address, I promised I won't tell it to anyone. 
If you have a web site or blog, you can type the URL right here. 
This is where you type your comments. 
Remember my information for the next time I visit.