Friday, July 17, 2009

Linux 2.6.30+/SELinux/RHEL5 test kernel 0day Exploit

[Full-disclosure] Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable

Title says it all, exploit is at:

Everything is described and explained in the exploit.c file.
I exploit a bug that by looking at the source is unexploitable;
I defeat the null ptr dereference protection in the kernel on
both systems with SELinux and those without.
I proceed to disable SELinux/AppArmor/LSM/auditing

Exploit works on both 32bit and 64bit kernels.

Links to videos of the exploit in action are present in the exploit

Demo on Youtube

See also A new fascinating Linux kernel vulnerability

No comments: