Author: Catalin Cimpanu / Source: BleepingComputer
A vulnerability nicknamed “Stack Clash” allows an attacker to gain root privileges on a UNIX system and take over vulnerable machines.
The flaw was discovered last month by security researchers from Qualys, who worked with various vendors to make sure patches are available before going public with their findings.
According to Qualys researchers, the issue affects a host of *NIX systems, such as Linux, OpenBSD, NetBSD, FreeBSD, and Solaris. Researchers only tested Stack Clash on the i386 and amd64 platforms, and they don’t exclude that other vendors and platforms may also be affected.
Issue was first discovered back in 2005
At the heart of this vulnerability is an issue that has been known since 2005, patched, then rediscovered to be vulnerable again in 2010, patched, and now discovered again.
This issue revolves around the notion of stacks, which are memory regions where applications execute code inside the computer’s RAM. As a program grows, an app’s stack also…
Click here to read more
