[Full-disclosure] Linux Local Root -- CVE-2012-0056 -- Detailed Write-up

[Jason A. Donenfeld]

On Mon, Jan 23, 2012 at 04:55, Jason A. Donenfeld <Jason at zx2c4.com> wrote:

> Never seen checksec. Cool.
>
> As it turns out, Fedora seems to do a good job at compiling (all? not
> sure) their suid executables with -pie.
>
>
Revision. It does in fact work with fedora. /usr/bin/gpasswd.
http://git.zx2c4.com/CVE-2012-0056/tree/mempodipper.c?h=fedora
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20120123/79b6be4a/attachment.html