CVE-2003-0127
EXPLOITEDLinux kernel <2.2.25-2.4.21 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2003-0127 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 5 public exploits from researchers including KuRaK, Wojciech Purczynski, [email protected].
AI-analyzed exploit summary This exploit targets a Linux kernel vulnerability (CVE-2003-0127) in versions up to 2.4.20, leveraging the kernel module loader to achieve local privilege escalation. It uses ptrace to inject shellcode into a modprobe process, executing arbitrary code as root.
Description
The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.
Exploits (5)
This exploit targets a Linux kernel vulnerability (CVE-2003-0127) in versions up to 2.4.20, leveraging the kernel module loader to achieve local privilege escalation. It uses ptrace to inject shellcode into a modprobe process, executing arbitrary code as root.
This exploit leverages a race condition in the Linux kernel's ptrace() system call to attach to a root-spawned process (modprobe), allowing privilege escalation to superuser. It injects shellcode to bind a root shell on port 24876.
This exploit leverages a race condition in the Linux kernel's kmod.c to ptrace a cloned process, allowing control over a privileged modprobe binary for local privilege escalation. It injects shellcode to spawn a root shell.
This exploit leverages a ptrace() system call vulnerability in Linux kernels 2.2 and 2.4 to gain superuser privileges by attaching to a root process during a specific time window. It injects shellcode to execute arbitrary commands or spawn a shell.
This repository provides a detailed technical walkthrough of exploiting CVE-2002-0082 (mod_ssl buffer overflow) for initial access and CVE-2003-0127 (ptrace race condition) for privilege escalation. It includes step-by-step enumeration, exploit selection, compilation, and execution details.