Description
dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.
References
- 372 vdb-entry
- 19980730 FD's 0..2 and suid/sgid procs (Was: Crash a redhat 5.1 linux box) mailing-list
- 19980729 Crash a redhat 5.1 linux box mailing-list