<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Aloha lists,<br>
<br>
There has been a lot of talk about the SYSRET vulnerability [1]
recently and even some pretty good write ups [2]. Of course the best
discussion of this bug will undoubtedly come from Rafal at his
BlackHat talk in Vegas [3]. <br>
<br>
For those of you who are eager to see an exploit for this
vulnerability in action we've got you covered:
<a class="moz-txt-link-freetext" href="http://partners.immunityinc.com/movies/SYSRET-v2.mov">http://partners.immunityinc.com/movies/SYSRET-v2.mov</a> . The exploit
has been available since Friday to CANVAS Early Updates (CEU)
customers for their FreeBSD privilege escalation pleasure, courtesy
of our Unix exploit development team. For CEU inquiries please email
<a class="moz-txt-link-abbreviated" href="mailto:admin@immunityinc.com">admin@immunityinc.com</a> .<br>
<br>
We were chatting about this on Friday, do other people see FreeBSD
in the enterprise on pen-tests? Outside of a few NAS solutions I've
seen it employed in source control and for other important tasks
(DNS, FTP). Now that Linux is so common place is FreeBSD considered
exotic?<br>
<br>
Cheers,<br>
-AlexM<br>
<br>
[1] <a class="moz-txt-link-freetext" href="http://www.kb.cert.org/vuls/id/649219">http://www.kb.cert.org/vuls/id/649219</a><br>
[2]
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<a class="moz-txt-link-freetext" href="http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-privilege-escalation/">http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-privilege-escalation/</a><br>
[3]
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<a class="moz-txt-link-freetext" href="https://www.blackhat.com/html/bh-us-12/bh-us-12-briefings.html#Wojtczuk">https://www.blackhat.com/html/bh-us-12/bh-us-12-briefings.html#Wojtczuk</a>
<pre class="moz-signature" cols="72">--
Alex McGeorge
Immunity Inc.
1130 Washington Avenue 8th Floor
Miami Beach, Florida 33139
P: 786.220.0600</pre>
</body>
</html>