CVE-2000-0506
Linux Kernel - Privilege Escalation via Setuid/Setcap Capabilities Bypass
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2000-0506. PoCs published by Florian Heinz, Wojciech Purczynski.
AI-analyzed exploit summary This exploit leverages a vulnerability in Linux POSIX capabilities where a parent process can manipulate capabilities to prevent a setuid program (like sendmail) from dropping privileges. This results in arbitrary command execution as root via a malicious .forward file.
Description
The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."
Exploits (2)
This exploit leverages a vulnerability in Linux POSIX capabilities where a parent process can manipulate capabilities to prevent a setuid program (like sendmail) from dropping privileges. This results in arbitrary command execution as root via a malicious .forward file.
This exploit leverages a Linux kernel capability handling flaw (CVE-2000-0506) to prevent setuid programs like sendmail from dropping privileges, resulting in local privilege escalation to root. It manipulates capabilities via LD_PRELOAD and crafts a malicious sendmail configuration to execute arbitrary commands.