Stay Ahead With Linux Security News

security advisorybuffer overflowtiming attack

Linux Kernel Ptrace: Local Root Access Threat and OpenSSL Timing Risk

The last several weeks, as always, have brought a constant flow of security advisories. Perhaps not a torrent, but certainly more than a mere trickle. Most notable among these is the Linux kernel ptrace vulnerability, which allows local users to acquire root privileges.. . .. The last several weeks, as always, have brought a constant flow of security advisories. Perhaps not a torrent, but certainly more than a mere trickle. Most notable among these is the Linux kernel ptrace vulnerability, which allows local users to acquire root privileges. Next, there is a clever timing attack against OpenSSL that can reveal a site's private key and thus compromise all of its traffic. There is also the mysql configuration file vulnerability, whereby a malicious user can write out a file that will allow him to acquire full privileges; a buffer overflow and local root exploit in the venerable lpr print daemon; a buffer overflow and potential root exploit in the Mutt mail reader's IMAP code; and a glibc integer overflow that allows remote code execution via RPC. . Current security bulletins underscore urgent vulnerabilities within the Linux kernel, OpenSSL, and MySQL, necessitating prompt action.. Linux Kernel Security, OpenSSL Timing Attack, Mysql Threat, Buffer Overflow Exploits. . LinuxSecurity.com Team

Mar 26, 2003 • LinuxSecurity.com Team Security Projects