Una optimización de compilador permite ejecutar código arbitrario en Linux

  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '3:a30a585dcc116c5cf515200e70196685' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: LOCK TABLES cache_filter WRITE in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: UPDATE cache_filter SET data = '<p>Un pobrecito hablador nos cuenta: &#171;Se ha publicado un exploit para una nueva vulnerabilidad descubierta en el kernel Linux, que afecta a las versiones 2.6.30 y 2.6.30.1. Dicha vulnerabilidad es particularmente importante porque a trav&#233;s de ella es posible evitar las protecciones de seguridad de m&#243;dulos como SELinux y AppArmor. Una posible soluci&#243;n es ejecutar el compilador con la orden CFLAGS+= -fno-delete-null-pointer-checks, que evita que la optimizaci&#243;n se lleve a cabo. El error est&#225; solucionado en la rama 2.6.31-rc3. Visto en Slashdot&#187;</p>\n', created = 1268311981, expire = 1268398381, headers = '' WHERE cid = '3:a30a585dcc116c5cf515200e70196685' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '3:33b07de80abd6408c9a7913d4bda101e' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: LOCK TABLES cache_filter WRITE in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: UPDATE cache_filter SET data = '<script type=\"text/javascript\"><!--\ngoogle_ad_client = \"pub-6721838437025464\";\n/* Grande Lateral Izquierdo */\ngoogle_ad_slot = \"7853472725\";\ngoogle_ad_width = 120;\ngoogle_ad_height = 600;\n//-->\n</script><script type=\"text/javascript\"\nsrc=\"http://pagead2.googlesyndication.com/pagead/show_ads.js\">\n</script>', created = 1268311981, expire = 1268398381, headers = '' WHERE cid = '3:33b07de80abd6408c9a7913d4bda101e' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '3:912a8ec779900b2236470b3771b5a84a' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: LOCK TABLES cache_filter WRITE in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: UPDATE cache_filter SET data = '<p></p>\n<p><a href=\"http://fusion.google.com/add?feedurl=http://feeds.feedburner.com/geekzonearg\"><img src=\"http://buttons.googlesyndication.com/fusion/add.gif\" width=\"104\" height=\"17\" style=\"border:0\" alt=\"Add to Google Reader or Homepage\"/></a></p>\n<p><a href=\"http://www.bloglines.com/sub/http://feeds.feedburner.com/geekzonearg\" title=\"Geekzone! - Todas las noticias tecnológicas, en un solo lugar\" type=\"application/rss+xml\"><img src=\"http://www.bloglines.com/images/sub_modern11.gif\" alt=\"Subscribe in Bloglines\" style=\"border:0\"/></a></p>\n<p><a href=\"http://add.my.yahoo.com/rss?url=http://feeds.feedburner.com/geekzonearg\" title=\"Geekzone! - Todas las noticias tecnológicas, en un solo lugar\"><img src=\"http://us.i1.yimg.com/us.yimg.com/i/us/my/addtomyyahoo4.gif\" alt=\"\" style=\"border:0\"/></a></p>\n<p></p>\n', created = 1268311981, expire = 1268398381, headers = '' WHERE cid = '3:912a8ec779900b2236470b3771b5a84a' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '3:502059a490423ce5473cc01915ab38bb' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: LOCK TABLES cache_filter WRITE in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: UPDATE cache_filter SET data = '<div align=\'center\'>\n<a href=\'http://www.drupal.org/\' target=\'_blank\'><br />\n<img src=\'/images/powered-gray-88x31.png\' alt=\'Drupal\' border=\'0\' /><br />\n</a>\n</div>\n', created = 1268311981, expire = 1268398381, headers = '' WHERE cid = '3:502059a490423ce5473cc01915ab38bb' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '2:4c3d44aeefe2b4eed82c11e90bfe3a15' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '3:0fd85b5d44d89e2eb0afa1da359f605f' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: LOCK TABLES cache_filter WRITE in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: UPDATE cache_filter SET data = '<p><!--/* OpenX Etiqueta Javascript v2.6.1 */--></p>\n<script type=\'text/javascript\'><!--//<![CDATA[\n var m3_u = (location.protocol==\'https:\'?\'https://banners.opengeeks.com.ar/www/delivery/ajs.php\':\'http://banners.opengeeks.com.ar/www/delivery/ajs.php\');\n var m3_r = Math.floor(Math.random()*99999999999);\n if (!document.MAX_used) document.MAX_used = \',\';\n document.write (\"<scr\"+\"ipt type=\'text/javascript\' src=\'\"+m3_u);\n document.write (\"?zoneid=6&amp;block=1\");\n document.write (\'&amp;cb=\' + m3_r);\n if (document.MAX_used != \',\') document.write (\"&amp;exclude=\" + document.MAX_used);\n document.write (document.charset ? \'&amp;charset=\'+document.charset : (document.characterSet ? \'&amp;charset=\'+document.characterSet : \'\'));\n document.write (\"&amp;loc=\" + escape(window.location));\n if (document.referrer) document.write (\"&amp;referer=\" + escape(document.referrer));\n if (document.context) document.write (\"&context=\" + escape(document.context));\n if (document.mmm_fo) document.write (\"&amp;mmm_fo=1\");\n document.write (\"\'><\\/scr\"+\"ipt>\");\n//]]>--></script><p><noscript><a href=\'http://banners.opengeeks.com.ar/www/delivery/ck.php?n=ad7425b1&amp;cb=INSERT_RANDOM_NUMBER_HERE\' target=\'_blank\'><img src=\'http://banners.opengeeks.com.ar/www/delivery/avw.php?zoneid=6&amp;n=ad7425b1\' border=\'0\' alt=\'\' /></a></noscript></p>\n', created = 1268311981, expire = 1268398381, headers = '' WHERE cid = '3:0fd85b5d44d89e2eb0afa1da359f605f' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '3:629009c02af84495d7c0f62be0265eed' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: LOCK TABLES cache_filter WRITE in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: UPDATE cache_filter SET data = '<div align=\'center\'><a rel=\"license\" href=\"http://creativecommons.org/licenses/by-nc-sa/2.5/ar/\"><br />\n<img alt=\"Creative Commons License\" style=\"border-width:0\" src=\"http://i.creativecommons.org/l/by-nc-sa/2.5/ar/88x31.png\" /><br />\n</a><br />\n<br />Los contenidos de este sitio se publican bajo la<br />\n<a rel=\"license\" href=\"http://creativecommons.org/licenses/by-nc-sa/2.5/ar/\">licencia de Creative Commons</a>.</div>\n', created = 1268311981, expire = 1268398381, headers = '' WHERE cid = '3:629009c02af84495d7c0f62be0265eed' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: SELECT data, created, headers, expire FROM cache_filter WHERE cid = '3:5a69194b6e31b2cee73388844857ae9b' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: LOCK TABLES cache_filter WRITE in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
  • user warning: Table './geekzone/cache_filter' is marked as crashed and should be repaired query: UPDATE cache_filter SET data = '<div align=\'center\'>\n<!--/* OpenX Etiqueta Javascript v2.6.1 */--></p>\n<script type=\'text/javascript\'><!--//<![CDATA[\n var m3_u = (location.protocol==\'https:\'?\'https://banners.opengeeks.com.ar/www/delivery/ajs.php\':\'http://banners.opengeeks.com.ar/www/delivery/ajs.php\');\n var m3_r = Math.floor(Math.random()*99999999999);\n if (!document.MAX_used) document.MAX_used = \',\';\n document.write (\"<scr\"+\"ipt type=\'text/javascript\' src=\'\"+m3_u);\n document.write (\"?zoneid=5&amp;block=1\");\n document.write (\'&amp;cb=\' + m3_r);\n if (document.MAX_used != \',\') document.write (\"&amp;exclude=\" + document.MAX_used);\n document.write (document.charset ? \'&amp;charset=\'+document.charset : (document.characterSet ? \'&amp;charset=\'+document.characterSet : \'\'));\n document.write (\"&amp;loc=\" + escape(window.location));\n if (document.referrer) document.write (\"&amp;referer=\" + escape(document.referrer));\n if (document.context) document.write (\"&context=\" + escape(document.context));\n if (document.mmm_fo) document.write (\"&amp;mmm_fo=1\");\n document.write (\"\'><\\/scr\"+\"ipt>\");\n//]]>--></script><p><noscript><a href=\'http://banners.opengeeks.com.ar/www/delivery/ck.php?n=a8f23a78&amp;cb=INSERT_RANDOM_NUMBER_HERE\' target=\'_blank\'><img src=\'http://banners.opengeeks.com.ar/www/delivery/avw.php?zoneid=5&amp;n=a8f23a78\' border=\'0\' alt=\'\' /></a></noscript></p>\n</div>\n', created = 1268311981, expire = 1268398381, headers = '' WHERE cid = '3:5a69194b6e31b2cee73388844857ae9b' in /var/www/geekzone.com.ar/htdocs/includes/database.mysql.inc on line 174.
Enviado por webmaster el Sáb, 07/18/2009 - 13:36.
::

Un pobrecito hablador nos cuenta: «Se ha publicado un exploit para una nueva vulnerabilidad descubierta en el kernel Linux, que afecta a las versiones 2.6.30 y 2.6.30.1. Dicha vulnerabilidad es particularmente importante porque a través de ella es posible evitar las protecciones de seguridad de módulos como SELinux y AppArmor. Una posible solución es ejecutar el compilador con la orden CFLAGS+= -fno-delete-null-pointer-checks, que evita que la optimización se lleve a cabo. El error está solucionado en la rama 2.6.31-rc3. Visto en Slashdot»