Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Linux ptrace/execve Race Condition Vulnerability

The Linux kernel is the core of all distributions of the Linux Operating System. It was originally written by Linus Torvalds, and is maintained by a community of developers.

A problem in the Linux Kernel could make it possible for a local user to gain elevated privileges. A problem with the checking of process tracing on programs attempting to execute other programs that are setuid or setgid. It is possible to trace a process after it has entered a setuid or setgid execution state.

This makes it possible for a local user to change parts of the process as they function, and potentially gain elevated privileges.







 

Privacy Statement
Copyright 2008, SecurityFocus