Centos 6 / Rhel 6 == Security hole -- Privledge esclation (CVE-2012-0056)

[SolidShellSecur]

https://rhn.redhat.com/errata/RHSA-2012-0052.html

* It was found that permissions were not checked properly in the Linux
kernel when handling the /proc/[pid]/mem writing functionality. A local,
unprivileged user could use this flaw to escalate their privileges. Refer
to Red Hat Knowledgebase article DOC-69129, linked to in the References,
for further information. (CVE-2012-0056, Important)

How to test if vuln
Ref: https://access.redhat.com/kb/docs/DOC-69129

wget "https://bugzilla.redhat.com/attachment.cgi?id=556461" -O test.c
gcc test.c -o test
./test

 

[handsonhosting]

Great pass along! Definitely a MUST DO for anyone running CentOS 6 systems!

 

[qhoster]

CentOS 6 turned out to be very buggy and seems not that secure as well ...