Re: Rooting FreeBSD , Privilege Escalation using Jails (Pétur)

2011-05-06 Thread Chris Rees
On 6 May 2011 16:54, Mark Felder wrote: > On Fri, 06 May 2011 10:13:50 -0500, Daniel Jacobsson > wrote: > >> Can someone confirm if this bugg/exploit works? > > It's really not a bug or exploit... it's just the guy being crafty. It only > makes sense: the jails access the same filesystem as the h

Re: Rooting FreeBSD , Privilege Escalation using Jails (Pétur)

2011-05-06 Thread Chris Rees
On 6 May 2011 17:18, "Mark Felder" wrote: > > On Fri, 06 May 2011 10:13:50 -0500, Daniel Jacobsson < daniel.jacobsson...@gmail.com> wrote: > >> Can someone confirm if this bugg/exploit works? > > > It's really not a bug or exploit... it's just the guy being crafty. It only makes sense: the jails a

Re: Rooting FreeBSD , Privilege Escalation using Jails (Pétur)

2011-05-06 Thread Mark Felder
On Fri, 06 May 2011 10:13:50 -0500, Daniel Jacobsson wrote: Can someone confirm if this bugg/exploit works? It's really not a bug or exploit... it's just the guy being crafty. It only makes sense: the jails access the same filesystem as the host. Put a file setuid in the jail and use yo

Re: Rooting FreeBSD , Privilege Escalation using Jails (Pétur)

2011-05-06 Thread Chris Rees
On 6 May 2011 16:27, "Daniel Jacobsson" wrote: > > Daniel Jacobsson skrev 2011-05-06 17:05: >> >> I read this (http://www.petur.eu/blog/?p=459) blog post today. It's about that a remote user with root privilegs to a FreeBSD jail & user privileges to the jails host machine can obtain root privilege

Rooting FreeBSD , Privilege Escalation using Jails (Pétur)

2011-05-06 Thread Daniel Jacobsson
I read this (http://www.petur.eu/blog/?p=459) blog post today. It's about that a remote user with root privilegs to a FreeBSD jail & user privileges to the jails host machine can obtain root privileges on the host machine. Can someone confirm if this bugg/exploit works?

Re: Rooting FreeBSD , Privilege Escalation using Jails (Pétur)

2011-05-06 Thread Daniel Jacobsson
Daniel Jacobsson skrev 2011-05-06 17:05: I read this (http://www.petur.eu/blog/?p=459) blog post today. It's about that a remote user with root privilegs to a FreeBSD jail & user privileges to the jails host machine can obtain root privileges on the host machine. Can someone confirm if this bu