CVE-2002-1125
FreeBSD <= 4.6.2-RELEASE - Kernel Memory Exposure via libkvm File Descriptor Leak
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2002-1125. PoCs published by badc0ded.
AI-analyzed exploit summary This exploit leverages BubbleMon's file descriptor leakage vulnerability to disclose kernel memory by executing a malicious command that inherits open file descriptors for /dev/mem and /dev/kmem.
Description
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.
Exploits (4)
This exploit leverages BubbleMon's file descriptor leakage vulnerability to disclose kernel memory by executing a malicious command that inherits open file descriptors for /dev/mem and /dev/kmem.
This exploit leverages ascpu's vulnerability to leak open file descriptors, allowing attackers to inherit access to /dev/mem and /dev/kmem by executing a malicious command. The PoC uses lsof to identify the leaked descriptors, confirming the information disclosure.
This exploit demonstrates a file descriptor leakage vulnerability in wmnet2, allowing attackers to inherit open file descriptors for /dev/mem and /dev/kmem by executing a malicious program through wmnet2. The PoC uses lsof to confirm the exposure of kernel memory access.
The exploit demonstrates a file descriptor leakage vulnerability in wmmon, allowing an attacker to inherit open file descriptors for /dev/mem and /dev/kmem by executing a malicious program through wmmon. This can lead to unauthorized disclosure of kernel memory.