The Planet Forums > RHEL5 Kernel Exploit

CypherSTL

Mar 6 2008, 03:12 PM

I'm running RHEL5 with cPanel. I'm wanting to fix the big "local root exploit" but I don't want to recompile the kernel and end up removing something from it that cPanel would require.

I'm also wanting to make a Tickless Server as well using a newer kernel version. Could this be done without messing up cPanel? Or does anyone have a working script to fix the current exploit on RHEL5?

Linux 2.6.18-53.1.4.el5 #1 SMP Wed Nov 14 10:37:27 EST 2007 x86_64 x86_64 x86_64 GNU/Linux is my current kernel.

markcausa

Mar 6 2008, 05:00 PM

Hey Patrick, I'm also interested in this. I'll keep you posted if I find something.

Cya

Mar 6 2008, 05:08 PM

QUOTE (CypherSTL @ Mar 6 2008, 10:12 PM)

I'm running RHEL5 with cPanel. I'm wanting to fix the big "local root exploit" but I don't want to recompile the kernel and end up removing something from it that cPanel would require.

I'm also wanting to make a Tickless Server as well using a newer kernel version. Could this be done without messing up cPanel? Or does anyone have a working script to fix the current exploit on RHEL5?

Linux 2.6.18-53.1.4.el5 #1 SMP Wed Nov 14 10:37:27 EST 2007 x86_64 x86_64 x86_64 GNU/Linux is my current kernel.

Hi there Cypher,

Today I received an email from RHN to inform about a security fix concerning RHEL 5 kernel. Logged into my dedicated and upgraded the kernel:

yum update (take some time...)
uname -a

Linux 2.6.18-53.1.13.el5 #1 SMP Mon Feb 11 13:27:52 EST 2008 i686 i686 i386 GNU/Linux

Everything looks fine but I will keep this post updated if there is any problem.

Greetings

James Jhurani

Mar 6 2008, 05:24 PM

Which local root exploit? the vmsplice exploit?

CypherSTL

Mar 6 2008, 05:45 PM

QUOTE (jjhurani @ Mar 6 2008, 05:24 PM)

Which local root exploit? the vmsplice exploit?

Yes, the vmsplice exploit.