Linux vsyscalls may be used as attack vectors
Date: Wed, 20 Apr 2005 22:04:20 +0200
From: Clad Strife <thadeum@gmail.com.>
To: bugtraq@securityfocus.com
Subject: Linux vsyscalls may be used as attack vectors
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_6119_21558147.1114027460647"
X-Virus-Scanned: antivirus-gw at tyumen.ru
------=_Part_6119_21558147.1114027460647
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
I send (again !) this e-mail including in attachment an advisory
explaining how vsyscalls may be used as powerful attack vectors on
Linux 2.6.x kernels.
I received many mailer daemon replies for delivery failures in
multiple boxes with my last e-mail. I hope this one will be okay.
Please, confirm.
Regards,
Clad.
(attachment : ret-onto-ret_en.txt)
------=_Part_6119_21558147.1114027460647
Content-Type: text/plain; name="ret-onto-ret_en.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="ret-onto-ret_en.txt"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------=_Part_6119_21558147.1114027460647--
