3 ms·
From the article: > It turns out that su on the vast majority of distros is not compiled with PIE, disabling ASLR for the .text section of the binary! I teste
by gioele 15y ago
From the article:
> It turns out that su on the vast majority of distros is not compiled with PIE, disabling ASLR for the .text section of the binary!
I tested on Ubuntu 10.04 LTS, likely to be installed on many servers, and 11.04. On these two versions `su` has not been compiled with PIE.
Edit: just to make things clear: in these Ubuntu versions su is compiled without PIE, but are not vulnerable because they have kernels < 2.6.39.