3 ms·

Failed on mine tzury@precision:/tmp$ uname -a Linux precision 2.6.32-26-generic #48-Ubuntu SMP Wed Nov 24 10:14:11 UTC 2010 x86_64 GNU/Linux tzury@

by tzury 16y ago

Failed on mine tzury@precision:/tmp$ uname -a Linux precision 2.6.32-26-generic #48-Ubuntu SMP Wed Nov 24 10:14:11 UTC 2010 x86_64 GNU/Linux tzury@precision:/tmp$ gcc nelson.c tzury@precision:/tmp$ ./a.out [*] Resolving kernel addresses... [+] Resolved econet_ioctl to 0xffffffffa00705d0 [+] Resolved econet_ops to 0xffffffffa00706c0 [+] Resolved commit_creds to 0xffffffff8108aed0 [+] Resolved prepare_kernel_cred to 0xffffffff8108b2b0 [*] Calculating target... [*] Triggering payload... [*] Exploit failed to get root.

sgt 16y ago
Read the header of the C program.
- tzury 16y ago
  Perhaps that is because I am well patched. Anyway, 2.6.32 <= 2.6.37 (my kernel). Beside, people are here have reported about their Ubuntu boxes which this exploit showed some success at there tzury@precision:/tmp$ uname -a Linux precision 2.6.32-26-generic #48-Ubuntu SMP Wed Nov 24 10:14:11 UTC 2010 x86_64 GNU/Linux tzury@precision:/tmp$ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=10.04 DISTRIB_CODENAME=lucid DISTRIB_DESCRIPTION="Ubuntu 10.04.1 LTS" tzury@precision:/tmp$ gcc full-nelson.c -o full-nelson tzury@precision:/tmp$ ./full-nelson [*] Resolving kernel addresses... [+] Resolved econet_ioctl to 0xffffffffa01815d0 [+] Resolved econet_ops to 0xffffffffa01816c0 [+] Resolved commit_creds to 0xffffffff8108aed0 [+] Resolved prepare_kernel_cred to 0xffffffff8108b2b0 [*] Calculating target... [*] Triggering payload... [*] Exploit failed to get root.
  - dredge 16y ago
    The point was that the comment in the header of the program clearly says: * In the interest of public safety, this exploit was specifically designed to * be limited: * * * The particular symbols I resolve are not exported on Slackware or Debian * * Red Hat does not support Econet by default * * CVE-2010-3849 and CVE-2010-3850 have both been patched by Ubuntu and * Debian

by tzury 16y ago

sgt 16y ago

Read the header of the C program.

tzury 16y ago
Perhaps that is because I am well patched. Anyway, 2.6.32 <= 2.6.37 (my kernel). Beside, people are here have reported about their Ubuntu boxes which this exploit showed some success at there tzury@precision:/tmp$ uname -a Linux precision 2.6.32-26-generic #48-Ubuntu SMP Wed Nov 24 10:14:11 UTC 2010 x86_64 GNU/Linux tzury@precision:/tmp$ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=10.04 DISTRIB_CODENAME=lucid DISTRIB_DESCRIPTION="Ubuntu 10.04.1 LTS" tzury@precision:/tmp$ gcc full-nelson.c -o full-nelson tzury@precision:/tmp$ ./full-nelson [*] Resolving kernel addresses... [+] Resolved econet_ioctl to 0xffffffffa01815d0 [+] Resolved econet_ops to 0xffffffffa01816c0 [+] Resolved commit_creds to 0xffffffff8108aed0 [+] Resolved prepare_kernel_cred to 0xffffffff8108b2b0 [*] Calculating target... [*] Triggering payload... [*] Exploit failed to get root.
- dredge 16y ago
  The point was that the comment in the header of the program clearly says: * In the interest of public safety, this exploit was specifically designed to * be limited: * * * The particular symbols I resolve are not exported on Slackware or Debian * * Red Hat does not support Econet by default * * CVE-2010-3849 and CVE-2010-3850 have both been patched by Ubuntu and * Debian