Linux kernel do_mremap本地权限提升漏洞

厂商补丁： Linux ----- Linux 2.4.24已经修复这个安全问题，请到厂商的主页下载：

http://www.kernel.org/

来源:US-CERT Vulnerability Note: VU#490620 名称: VU#490620 链接:http://www.kb.cert.org/vuls/id/490620 来源: BID 名称: 9356 链接:http://www.securityfocus.com/bid/9356 来源: REDHAT 名称: RHSA-2003:417 链接:http://www.redhat.com/support/errata/RHSA-2003-417.html 来源: ENGARDE 名称: ESA-20040105-001 链接:http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html 来源: XF 名称: linux-domremap-gain-privileges(14135) 链接:http://xforce.iss.net/xforce/xfdb/14135 来源: REDHAT 名称: RHSA-2003:419 链接:http://www.redhat.com/support/errata/RHSA-2003-419.html 来源: REDHAT 名称: RHSA-2003:418 链接:http://www.redhat.com/support/errata/RHSA-2003-418.html 来源: REDHAT 名称: RHSA-2003:416 链接:http://www.redhat.com/support/errata/RHSA-2003-416.html 来源: OSVDB 名称: 3315 链接:http://www.osvdb.org/3315 来源: SUSE 名称: SuSE-SA:2004:003 链接:http://www.novell.com/linux/security/advisories/2004_03_linux_kernel.html 来源: MANDRAKE 名称: MDKSA-2004:001 链接:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:001 来源: www.kernel.org 链接:http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.24 来源: DEBIAN 名称: DSA-1082 链接:http://www.debian.org/security/2006/dsa-1082 来源: DEBIAN 名称: DSA-1070 链接:http://www.debian.org/security/2006/dsa-1070 来源: DEBIAN 名称: DSA-1069 链接:http://www.debian.org/security/2006/dsa-1069 来源: DEBIAN 名称: DSA-1067 链接:http://www.debian.org/security/2006/dsa-1067 来源: DEBIAN 名称: DSA-475 链接:http://www.debian.org/security/2004/dsa-475 来源: DEBIAN 名称: DSA-470 链接:http://www.debian.org/security/2004/dsa-470 来源: DEBIAN 名称: DSA-450 链接:http://www.debian.org/security/2004/dsa-450 来源: DEBIAN 名称: DSA-442 链接:http://www.debian.org/security/2004/dsa-442 来源: DEBIAN 名称: DSA-440 链接:http://www.debian.org/security/2004/dsa-440 来源: DEBIAN 名称: DSA-439 链接:http://www.debian.org/security/2004/dsa-439 来源: DEBIAN 名称: DSA-427 链接:http://www.debian.org/security/2004/dsa-427 来源: DEBIAN 名称: DSA-423 链接:http://www.debian.org/security/2004/dsa-423 来源: DEBIAN 名称: DSA-417 链接:http://www.debian.org/security/2004/dsa-417 来源: DEBIAN 名称: DSA-413 链接:http://www.debian.org/security/2004/dsa-413 来源: CIAC 名称: O-045 链接:http://www.ciac.org/ciac/bulletins/o-045.shtml 来源: svn.debian.org 链接:http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2005-0528?op=file&rev=0&sc=0 来源: SECUNIA 名称: 20338 链接:http://secunia.com/advisories/20338 来源: SECUNIA 名称: 20202 链接:http://secunia.com/advisories/20202 来源: SECUNIA 名称: 20163 链接:http://secunia.com/advisories/20163 来源: SECUNIA 名称: 10532 链接:http://secunia.com/advisories/10532 来源: BUGTRAQ 名称: 20040112 SmoothWall Project Security Advisory SWP-2004:001 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107394143105081&w=2 来源: BUGTRAQ 名称: 20040107 [slackware-security] Kernel security update (SSA:2004-006-01) 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107350348418373&w=2 来源: BUGTRAQ 名称: 20040106 Linux mremap bug correction 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107340814409017&w=2 来源: BUGTRAQ 名称: 20040105 Linux kernel do_mremap() proof-of-concept exploit code 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107340358402129&w=2 来源: BUGTRAQ 名称: 20040105 Linux kernel mremap vulnerability 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107332782121916&w=2 来源: TRUSTIX 名称: 2004-0001 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107332754521495&w=2 来源: klecker.debian.org 链接:http://klecker.debian.org/~joey/security/kernel/patches/patch.CAN-2005-0528.mremap 来源: isec.pl 链接:http://isec.pl/vulnerabilities/isec-0013-mremap.txt 来源: IMMUNIX 名称: IMNX-2004-73-001-01 链接:http://download.immunix.org/ImmunixOS/7.3/updates/IMNX-2004-73-001-01 来源: CONECTIVA 名称: CLA-2004:799 链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799 来源: BUGTRAQ 名称: 20040108 [slackware-security] Slackware 8.1 kernel security update (SSA:2004-008-01) 链接:http://archives.neohapsis.com/archives/bugtraq/2004-01/0070.html 来源: SGI 名称: 20040102-01-U 链接:ftp://patches.sgi.com/support/free/security/advisories/20040102-01-U 来源: US Government Resource: oval:org.mitre.oval:def:867 名称: oval:org.mitre.oval:def:867 链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:867 来源: US Government Resource: oval:org.mitre.oval:def:860 名称: oval:org.mitre.oval:def:860 链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:860