{"published":"2015-03-21 17:54:33","description":"Linux\u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u304a\u3051\u308b\u4efb\u610f\u30a2\u30c9\u30ec\u30b9\u66f8\u304d\u63db\u3048\uff08Arbitrary address write\uff09\u306e\u8106\u5f31\u6027\u3092\u5229\u7528\u3057\u3001ret2usr\uff08Return-to-user\uff09\u3068\u547c\u3070\u308c\u308b\u624b\u6cd5\u306b\u3088\u308broot\u6a29\u9650\u3078\u306e\u6a29\u9650\u6607\u683c\u3092\u3084\u3063\u3066\u307f\u308b\u3002 \u74b0\u5883 Ubuntu 14.04.1 LTS 64bit\u7248\u3001Intel SMEP\u7121\u52b9 $ uname -a Linux vm-ubuntu64 3.13.0-44-generic #73-Ubuntu SMP Tue Dec 16 00:22:43 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux $ lsb_release -a No L\u2026","image_url":null,"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Finaz2.hatenablog.com%2Fentry%2F2015%2F03%2F21%2F175433\" title=\" Linux\u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb\u3067ret2usr\u306b\u3088\u308b\u6a29\u9650\u6607\u683c\u3092\u3084\u3063\u3066\u307f\u308b - \u3082\u3082\u3044\u308d\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"\u3082\u3082\u3044\u308d\u30c6\u30af\u30ce\u30ed\u30b8\u30fc","version":"1.0","author_url":"https://blog.hatena.ne.jp/inaz2/","url":"https://inaz2.hatenablog.com/entry/2015/03/21/175433","blog_url":"https://inaz2.hatenablog.com/","height":"190","provider_name":"Hatena Blog","title":" Linux\u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb\u3067ret2usr\u306b\u3088\u308b\u6a29\u9650\u6607\u683c\u3092\u3084\u3063\u3066\u307f\u308b","author_name":"inaz2","width":"100%","type":"rich","provider_url":"https://hatena.blog","categories":["Exploit"]}