Oh yes it is:

 > [admin@xx10 admin]$ ./prak /usr/sbin/traceroute
 > bug exploited successfully.
 > enjoy!
 > bash# id
 > bash# uid=0(root) gid=0(root)
 > groups=27(admin),10(wheel),110(home),111(site-adm)
 > bash# uname -a
 > bash# Linux xx10.test.nl 2.2.16C24_III #1 Thu Mar 22 21:17:39 PST 2001 i586
 > unknown
 > bash#


At 11:05 26-4-2001 -0700, you wrote:
>On Thu, 26 Apr 2001, Dennis Koster wrote:
>
> > On Thu, Apr 26, 2001 at 09:49:18AM +0200, Miro Majcen wrote:
> > > i was just wondering if anyone already applied the
> > > RaQ4-All-Kernel-1.0.1-2.216C24III.pkg package released yesterday ?
> >
> > the pkg isn;t a problem,
> > the kernel version is.
> >
> > All kernels below the 2.2.19 are rootable
> > So we want 2.2.19 or higher (If it was up to me I would go for a 2.4.x one)
>If you'll read what's posted in the download page, they said  the bugs of
>the ptrace() and sysctl() functions have been fixed there.  If Cobalt
>keeps their former way of deploying Linux, they manually twaeak the kernel
>to fit to what they need... so... it's not rootable.

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to