Registration Weakness in Linux Kernel's Binary formats (Poluting sys_execve) http://goodfellas.shellcode.com.ar/binfmt.xml Weakness found in the handling of simply linked lists used to register binary formats handled by Linux kernel, and affects all the kernel families (2.0/2.2/2.4/2.6). That's demostrated using root privileges with a POC project, and you could patch preventive using the patches exposed in that document. en (c) SHELLCODE IT Solutions & Security Research 2007-01-20 19:55:32.855444 Document (english) http://goodfellas.shellcode.com.ar/own/binfmt-en.pdf The detail document publicated goodfellas 2006-11-20 19:55:26.806838 document Document (Spanish) http://goodfellas.shellcode.com.ar/own/binfmt-es.pdf The detailed document published goodfellas 2006-11-20 19:55:26.806838 document Presentation (English) http://goodfellas.shellcode.com.ar/own/binfmt-en.ppt Presentation made in H2HC GoodFellas 2006-11-20 19:55:26.806838 presentation Proof of concept http://goodfellas.shellcode.com.ar/src/binfmt/ The proof of concept source goodfellas 2007-01-20 19:55:26.806838 source