[DSA 1494-1] Still vulnerable?

3 msg	qemu unchecked block read/write vulnerability
1 msg	[OT] Reiserfs forensics
15 msg	Recent updates
1 msg	Eine Empfehlung von Oliver
8 msg	DSA-1494-1 - Graphics errors
1 msg	Welcome to WebBrands!
1 msg	Re: [SECURITY] [DSA 1496-1] New mplayer package...
2 msg	help
3 msg	DSA-1494-1 linux-2.6 for vserver

[DSA 1494-1] Still vulnerable?
\ Jens Schüßler (12 Feb 2008)
. \ Florian Weimer (12 Feb 2008)
. . \ Jens Schüßler (12 Feb 2008)
. . . \ Florian Weimer (12 Feb 2008)
. . . . \ Jens Schüßler (12 Feb 2008)
. . . \ Michel Messerschmidt (12 Feb 2008)
. . . . \ Jens Schüßler (12 Feb 2008)
. . . \ Stefan Fritsch (12 Feb 2008)
. . . \ Michel Messerschmidt (12 Feb 2008)
. . \ Martin Spinassi (13 Feb 2008)
. . . \ Noah Meyerhans (13 Feb 2008)
. . . . \ Martin Spinassi (13 Feb 2008)

2 msg	[DSA 1494-1] Missing update for user-mode-linux...
2 msg	default tripwire policy
3 msg	Re: [SECURITY] [DSA 1494-1] New linux-2.6 packa...
3 msg	[Fwd: [Xen-users] patch for kernel exploit?]
1 msg	What does this sentence mean in security advisory?
4 msg	Testers needed: nagios-plugins
3 msg	setuid binary in ktsuss
1 msg	Julien THUILLIER est absent(e).
1 msg	Promocao de instrumentos da area medica e odont...
3 msg	strange output for command ps

Subject:	[DSA 1494-1] Still vulnerable?
Group:	Debian-security
From:	Jens Schüßler
Date:	12 Feb 2008

I just upgraded my linux-source-2.6.18 to 2.6.18.dfsg.1-18etch1_all and
build a new linux-image. But after installing an rebooting I still was
able to become root with this exploit:
http://milw0rm.com/exploits/5092

Can anyone reproduce this?

Jens

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster