New security exploit -- allows local user to gain root

[iseletsk]

There is a new security exploit that allows local user to gain root access to the server. My guess is pretty much all hosting companies doing linux hosting are affected
There is no update yet available from any vendor, but as a work around, you can do following:

# mount -o bind /tmp /tmp
# mount -o remount,bind,nosuid /tmp /tmp
# mount -o bind /home /home
# mount -o remount,bind,nosuid /home /home

Make sure you bind and remount as nosuid all directories (parent level only) where local users can create files. If your users' home directories are at /var/www, do that for /var/www directory

# mount -o bind /var/www /var/www
# mount -o remount,bind,nosuid /var/www /var/www

Full Disclosure was published here yesterday:
More info: Full Disclosure: The GNU C library dynamic linker expands $ORIGIN in setuid library search path
CVE-2010-3847

[rhm.geerts]

RedHat and Centos have an update for it already.

https://www.ksplice.com/cve-2010-3847

[javiercampos]

Thanks iseletsk and rhm.geerts

[PlatinumServerM]

Thanks for the notice!