>> grsecurity "expand_stack()" Function Unspecified Local Privilege Escalation Vulnerability
Title : grsecurity "expand_stack()" Function Unspecified Local Privilege Escalation Vulnerability VUPEN ID : VUPEN/ADV-2007-0155 CVE ID : CVE-2007-0257
Rated as : Moderate Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2007-01-12
Technical Description
A vulnerability has been identified in grsecurity, which could be exploited by local attackers to obtain elevated privileges. This issue is due to an unspecified error in the "expand_stack()" function, which could allow malicious users to execute arbitrary commands with root privileges. No further details have been disclosed.