Privilege escalation vulnerability on 64-bit Intel CPU hardware
1–10 of 37 posts
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#2This is old news.
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#3Sounds like the vulnerability is in the software (the hardware works as specified): "Intel claims that this vulnerability is a software implementation issue, as their processors are functioning as per their documented specifications. However, software that fails to take the Intel-specific SYSRET behavior into account may be vulnerable."
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#4Sounds like the vulnerability is in the software (the hardware works as specified): "Intel claims that this vulnerability is a software implementation issue, as their processors are functioning as per their documented specifications. However, software that fails to take the Intel-specific SYSRET behavior into account may be vulnerable."
The issue seems to be present in Xen, Windows, and Linuxes -- this suggests that, regardless of technicalities, Intel did something unwise. (Or at least didn't communicate effectively with software vendors)
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#5Date Public: 12 Apr 2006 ?!
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#6Date Public: 12 Apr 2006 ?!
I believe that is referring to this http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-074...
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#7Sounds like the vulnerability is in the software (the hardware works as specified): "Intel claims that this vulnerability is a software implementation issue, as their processors are functioning as per their documented specifications. However, software that fails to take the Intel-specific SYSRET behavior into account may be vulnerable."
The issue seems to be present in Xen, Windows, and Linuxes -- this suggests that, regardless of technicalities, Intel did something unwise. (Or at least didn't communicate effectively with software vendors)
FreeBSD also.
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#8Date Public: 12 Apr 2006 ?!
[deleted]
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#9Sounds like the vulnerability is in the software (the hardware works as specified): "Intel claims that this vulnerability is a software implementation issue, as their processors are functioning as per their documented specifications. However, software that fails to take the Intel-specific SYSRET behavior into account may be vulnerable."
Intel's position is disingenuous at best. The SYSRET instruction was introduced by AMD long before Intel added support for it, so it was entirely natural for people to expect that Intel's implementation would be consistent with AMD's specification.
If you build a car which experiences temporal anomalies when driven at 88 miles per hour, it isn't good enough to have a line of fine print in the middle of a 1500 page manual. People expect to be able to drive a car at 88 miles per hour without ending up in the wrong century, and you should either not violate that assumption or have really big warning signs.
Re: Privilege escalation vulnerability on 64-bit Intel CPU hardware
#10Anyone got a link to a more detailed explanation of the vulnerability and how it would be exploited?