Vuoi reagire a questo messaggio? Crea un account in pochi click o accedi per continuare.

Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)

2 partecipanti

Andare in basso

Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth) Empty Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)

Messaggio Da The King™ Mar Lug 22, 2008 7:15 pm

/* Debian (maybe other derivates |KUDUBUTUNTU|) OpenSSH Remote -=Authenticated=- SELinux Privilege Elevation
*** Fedora/RHEL Linux should be tested because it _MAY_ contain the same vulnerability
*** in it's OpenSSH patches in a time slice. Latest OpenSSH should not be vulnerable. Older Debian Releases may.
**** One vulnerable example is "openssh-SNAP-20070303.tar.gz", currently reachable at
**** ftp://ftp.bit.nl/mirror/openssh/openssh-SNAP-20070303.tar.gz
****
*** See the "Diff Patch" by Debian:
*** + authctxt->role = role ? xstrdup(role) : NULL;
**** Where the role is defined in the username after a forward slash '/'
**** So anyone can set arbritrary SELinux roles, when OpenSSH is configured with --with-selinux -
**** What is a common configuration nowadays.
**** For the kids:
***** ssh -lusername:[style]/<arbritrary SELinux role> host
***** ssh -p2222 -lusername:/wishedrole 127.0.0.1
**** ':' means [style] -> [[not relevant]] '/'<arbritrary SELinux role> is the specified SELinux role.
****
**** This seams to be a bug jailed in some distros because of legacy code.
****
**** 'Exploit' found and delivered by Kingcope.
***//Želiteb0yŽ//
**** CHEERIO ****/
REM blablablaIHAVEPRETTYIDEAHOWSELINUXRUNSWORKSORWHATEVERblablabla
The King™
The King™
Amministratore
Amministratore

Numero di messaggi : 1270
Età : 33
Club Affiliazione : Falcon (vt)
Reputazione : Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth) Pipel1
Data d'iscrizione : 06.05.08

https://softairpassion.forumattivo.it

Torna in alto Andare in basso

Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth) Empty Re: Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)

Messaggio Da Cuma Mer Lug 23, 2008 12:14 am

??

Cuma
Co-Moderatore
Co-Moderatore

Numero di messaggi : 149
Età : 33
Club Affiliazione : jolly rogers s.a.t
Reputazione : Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth) 111010
Data d'iscrizione : 07.05.08

Torna in alto Andare in basso

Torna in alto


 
Permessi in questa sezione del forum:
Non puoi rispondere agli argomenti in questo forum.