grsecurity effieffectiveness test with latest proftpd remote exploit

Question

i just tested grsecurity. i installed debian and a vulnerable version of proftpd. i launched an exploit. worked. patched the latest kernel with grsec. and now the exploit doesnt work anymore. BUT . wouldnt just a the new kernel alone cause the exploit to fail? the exploit was only for debian sqzeeze and one special version of proftpd??

Thinking you'll get interest if you post this over in security.stackexchange.com — Rory Alsop, Jan 31 '11 at 21:15

score 1 · Accepted Answer · answered Jan 31 '11 at 23:09

1

It did work!

didnt see it in the remote shell but directly on the server

http://webservsec.blogspot.com/2011/01/grsecurity-vs-proftpd-exploit.html

answered Jan 31 '11 at 23:09

baj

139
2
8

grsecurity effieffectiveness test with latest proftpd remote exploit

1 Answers1