oss-security February 2011 archive
Main Archive Page > Month Archives  > oss-security archives
oss-security: [oss-security] CVE request: kernel: /proc/$pid/ le

[oss-security] CVE request: kernel: /proc/$pid/ leaks contents across setuid exec

From: Kees Cook <kees_at_nospam>
Date: Thu Feb 24 2011 - 23:57:06 GMT
To: oss-security@lists.openwall.com

Hi,

I'd like to get a CVE assigned for this information leak issue:
https://lkml.org/lkml/2011/2/7/368

Pre-opened file descriptors in /proc/$pid/ can bypass DAC allowing
visibility into setuid process state, especially leaking ASLR offset.

Thanks,

-Kees

-- Kees Cook Ubuntu Security Team