Re: [oss-security] CVE request: kernel: /proc/$pid/ leaks contents across setuid exec

From: Eugene Teo <eugene_at_nospam>
Date: Fri Feb 25 2011 - 00:15:04 GMT
To: oss-security@lists.openwall.com

On 02/25/2011 07:57 AM, Kees Cook wrote:
> Hi,
>
> I'd like to get a CVE assigned for this information leak issue:
> https://lkml.org/lkml/2011/2/7/368
>
> Pre-opened file descriptors in /proc/$pid/ can bypass DAC allowing
> visibility into setuid process state, especially leaking ASLR offset.

Please use CVE-2011-1020.

Eugene
-- Eugene Teo / Red Hat Security Response Team

This message: [ Message body ]
Next message: Kees Cook: "[oss-security] CVE request: kernel: /sys/kernel/debug/acpi/custom_method can bypass module restrictions"
Previous message: Eugene Teo: "Re: [oss-security] CVE request: kernel: CAP_SYS_MODULE bypass via CAP_NET_ADMIN"
In reply to: Kees Cook: "[oss-security] CVE request: kernel: /proc/$pid/ leaks contents across setuid exec"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]