Vmsplice() local root exploit: Difference between revisions

Revision as of 13:46, 30 September 2009

Revision as of 06:49, 8 December 2009

Line 1:

{{lowercase}}

The '''[[Splice_(system_call)|vmsplice]]() local root exploit''' was a short-lived vulnerability in the [[Linux kernel]] that allowed a user with [[shell account|shell access]] to mount a [[privilege escalation]] attack to gain [[root privileges]] against a system running versions of 2.6.17 or later of the kernel.<ref name="Secunia">{{cite news | first=Wojciech | last=Purczynskiof | coauthors= qaaz | title= Linux Kernel "vmsplice()" System Call Vulnerabilities | date=[[2008-02-11]] | url =http://secunia.com/advisories/28835/ | work =[[Secunia]] | pages = | accessdate = 2008-04-16 | language = }}</ref><ref>{{cite news | first= | last=Dawson | coauthors= | title= Linux Kernel "vmsplice()" System Call Vulnerabilities | date=[[2008-02-10]] | publisher=[[SourceForge]] | url =http://it.slashdot.org/article.pl?sid=08/02/10/2011257 | work =[[Slashdot]] | pages = | accessdate = 2008-04-16 | language = }}</ref> This was fixed in kernel version 2.6.24.2. <ref name="Secunia"/>

==References==