Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Slackware 8.1: 2004-008-01 Critical: Local Privilege Escalation Fix

slackware
Calendar Grey January 9, 2004
Dist Slackware Esm H88
The recent patch for Debian 9.0 kernel fixes vulnerability related to copy_to_user() allowing local privilege escalation for unprivileged users.
New kernels are available for Slackware 8.1 containing a backported fix from a bounds-checking problem in the kernel's mremap() call which could be used by a local attacker to gain...

Summary

Here are the details from the Slackware 8.1 ChangeLog: Thu Jan 8 18:21:27 PST 2004 patches/kernels/*: These are 2.4.18 kernels containing a backported fix for a security problem with the kernel's mremap() function. A local user could exploit this hole to gain root privileges. For more details, see: https://www.cve.org/CVERecord?id=CVE-CAN-2003-0985 After installing the new kernel, be sure to run 'lilo'. (* Security fix *) patches/packages/kernel-ide-2.4.18-i386-5.tgz: Patched mremap(). (* Security fix *) patches/packages/kernel-source-2.4.18-noarch-6.tgz: This is the source code from kernel-source-2.4.18-noarch-5 with the fix for mremap(). (* Security fix *) WHERE TO FIND THE NEW PACKAGES: Updated packages for Slackware 8.1: An alternate kernel may be installed. Those are found in this directory: ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/kernels/ MD5 SIGNATURES: MD5 signatures may be downloaded from our FTP server: Slackware 8.1

Read the Full Advisory

Where Find New Packages

MD5 Signatures

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Related News

Your message here