5 ms·
Just from looking at the code, this exploit works only for 32 bit machines, all 64 bit installations should be fine.
by ddalex_ro 13y ago
Just from looking at the code, this exploit works only for 32 bit machines, all 64 bit installations should be fine.
- 0x0 13y agoCan you back that up? The exploit states x86_64, and even if there is only an x86 exploit published, it's likely the same vulnerability is present on an x86_64 kernel (in general). Lack of exploit code doesn't imply a lack of vulnerability :)
- ddalex_ro 13y agoI mean, the fix consists in making sure that attr.config has all the 64 bits cleared - on the 64 bit machines, int is 64bit, so u64 == int, and all the bits are correctly handled. on 32 bit machines, int is 32bit, and the top 32 bit of attr.config is not cleared. I may be wrong though, as I didn't scan through all the affected code.
- ah- 13y agoI just tried it on a 64bit machine and it works.
- jbaiter 13y agoI just ran the exploit on a 64bit machine and it worked as expected, I got root privileges.
- sd_ 13y agoIt's not that hard to port it to 32 bits, just hang on week or two. I'm just too lazy. IGjDf1e4eQxWyBFArYM8HgvCuns6p+GbfHoE3SPxYV59kXnA12BWdMr6D5eAAFgtBSX+/Yi+vLxMmEiszkwHLCA=
- rommelvr 13y agoHahaha. Love that you signed your message with your 'jewgold' address. Nice 0day.
- dfc 13y agoMe too. I love latent antisemitism.
- ambiate 13y agoThe goto and labels stick out like coal in a pile of gold.
- sd_ 13y agoDuly noted. Will attempt to obfuscate using longjmp next time.
- deleted 13y ago[deleted]
- edwintorok 13y agoNo, int is the same size on 32-bit and 64-bit Linux: sizeof(int) == 4 sizeof(long) == 4 (32-bit), 8 (64-bit) sizeof(long long) == 8
- ddalex_ro 13y agoI learn something every day, thank you !
- papsosouid 13y agohttp://en.wikipedia.org/wiki/64-bit_computing#64-bit_data_models http://en.wikipedia.org/wiki/64-bit_computing#64-bit_data_mo...
- snicklepuff 13y agoWrong -- works on x86_64 Debian.