Displaying 1 result from an estimated 1 matches for "2007woot".
2007 Aug 09
9
Is DTrace Vulnerable?
...d "Cambridge Researcher Breaks
OpenBSD Systrace". Slashdot anonymous member has a comment "Even Sun''s
Dtrace might be vulnerable." I don''t think it is. Comments?
Exploiting Concurrency Vulnerabilities in System Call Wrappers
http://www.watson.org/~robert/2007woot/2007usenixwoot-exploitingconcurrency.pdf
Abstract
System call interposition allows the kernel security model to be
extended. However, when combined with current operating systems, it is
open to concurrency vulnerabilities leading to privilege escalation and
audit bypass. We discuss the theory an...