8-8 recent 32-bit support for Kernet x86_64 2 Vulnerabilities

CVE-2010-3081 and 3301 these two are X86_64 Kernel in 32-bit support vulnerability, it is said that 07 years when there was a problem, then patch, but I don't know why I lost this patch when I updated it in. Similar problems appear not only on the Kernel, but also on some other applications, such as common java framework applications. It seems that such a simple problem should be a management problem, it is not a technical issue. Developers should pay attention to this situation. In the future, they can consider using these as negative examples for training.

3301 EXP in: http://www.exploit-db.com/exploits/15023/ this is also a bug that was later made up, in the common release of the test of this vulnerability in the Red Hat Enterprise series, it seems not affected, however, the latest update on the FC Personal Edition of the same manufacturer is still affected.

And 3081: http://www.exploit-db.com/exploits/15024/ this is the new way to use the bug, in Red Hat Enterprise series affected, lethal powerful, but FC13 is not affected.

Currently, no Kernel patch is available. temporarily disabling 32-bit ELF support can solve the problem.

 

This Bo original, such as reprint please indicate the source: http://blog.vfocus.net, thank you.