LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   What does junk the cache mean? (https://www.linuxquestions.org/questions/linux-security-4/what-does-junk-the-cache-mean-485453/)

abefroman 09-20-2006 06:46 PM

What does junk the cache mean?
 
I am trying to see if
2.6.42 is vulnerable on my test server,
can you confirm you got the same:
[tester@test tmp]$ ./h00lyshit file

preparing
trying to exploit file

failed: Permission denied

They state:
** if y0u dont have one, make big file (~100MB) in /tmp with dd
** and try to junk the cache e.g. cat /usr/lib/* >/dev/null

What do they mean by
"and try to junk the cache e.g. cat /usr/lib/* >/dev/null" ?

~=gr3p=~ 09-22-2006 03:52 AM

maybe so ur kernel is not vulnerable..i got the same on a not affected kernel. on affected kernel i get Exec format error.

Valkyrie_of_valhalla 09-23-2006 06:43 AM

Hmm, from my knowledge, cat /usr/lib/* should show the contents of every file in /usr/lib, and >/dev/null sends everything printed to stdout (aka printed on screen and not an error) to /dev/null, that is, doesn't show it any more.
Basicly, I can't see any reason to use that command except to see which files you haven't got access to, or something like that. And, also, from what I know, /usr/lib has nothing to do with cache, but I am still new to this, so, anyone correct me if I am wrong.
Also, who are "they" and what's the deal with a 100Mb file in /tmp?

win32sux 09-23-2006 11:57 AM

Quote:

Originally Posted by Valkyrie_of_valhalla
Also, who are "they" and what's the deal with a 100Mb file in /tmp?

"they" would be the person(s) who wrote the exploit...

i believe the 100MB file is only needed if you don't have any other big file to run the exploit against...

spirit receiver 09-23-2006 12:35 PM

Quote:

Originally Posted by abefroman
What do they mean by
"and try to junk the cache e.g. cat /usr/lib/* >/dev/null" ?

Is it possible that they're just trying to clear the disc cache by reading arbitrary data?


All times are GMT -5. The time now is 03:36 AM.