Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0572. PoCs published by phased.
AI-analyzed exploit summary This exploit leverages a BSD kernel bug where file descriptors 0-2 are not validated before exec()ing setuid images, allowing an attacker to manipulate standard I/O channels to gain root privileges via keyinit.
Description
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
Exploits (1)
This exploit leverages a BSD kernel bug where file descriptors 0-2 are not validated before exec()ing setuid images, allowing an attacker to manipulate standard I/O channels to gain root privileges via keyinit.