Centos 6 / Rhel 6 == Security hole -- Privledge esclation (CVE-2012-0056)

SolidShellSecur · Post #1 (**permalink**) 01-24-2012, 03:34 PM

https://rhn.redhat.com/errata/RHSA-2012-0052.html

Quote:

* It was found that permissions were not checked properly in the Linux
kernel when handling the /proc/[pid]/mem writing functionality. A local,
unprivileged user could use this flaw to escalate their privileges. Refer
to Red Hat Knowledgebase article DOC-69129, linked to in the References,
for further information. (CVE-2012-0056, Important)

How to test if vuln
Ref: https://access.redhat.com/kb/docs/DOC-69129

Quote:

wget "https://bugzilla.redhat.com/attachment.cgi?id=556461" -O test.c
gcc test.c -o test
./test

handsonhosting · Post #2 (**permalink**) 01-24-2012, 09:05 PM

Great pass along! Definitely a MUST DO for anyone running CentOS 6 systems!

qhoster · Post #3 (**permalink**) 04-17-2012, 02:10 PM

CentOS 6 turned out to be very buggy and seems not that secure as well ...