Malicious local user could gain full privileges by exploiting 'ptrace' hole
vnunet.com, 21 Mar 2003
A developer who helped write the original Linux kernel is warning of a flaw in some versions of the operating system that could allow a malicious local user to gain root control of a Linux computer.
Linux expert Alan Cox, who worked with Linus Torvalds on building the open source operating system's original kernel, posted the warning about the 'ptrace' debugging tool on a Linux developers' mailing list here.
Cox explained that the vulnerability could not be exploited remotely. "The Linux 2.2 and 2.4 kernels have a flaw in ptrace," he said.
"This hole allows local users to obtain full privileges. Remote exploitation of this hole is not possible. Linux 2.5 is not believed to be vulnerable.
"Linux 2.2.25 has been released to correct Linux 2.2. It contains no other changes.
"The bug fixes that would have been in 2.2.5pre1 will now appear in 2.2.26pre1. The patch will apply directly to most older 2.2 releases."
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
We've finally cut the ribbon on V3.co.uk's inaugural Summit event...
In part one of our report, we talk to EMC...
Experts warn behavioural monitoring is essential to protect sensitive data
Do you agree?
Have your say on this article