CVE-2003-0462
Mandrake Multi Network Firewall - Denial of Service via execve Race Condition
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0462. PoCs published by IhaQueR.
AI-analyzed exploit summary This exploit leverages a race condition in the Linux 2.4.x kernel's execve() system call to gain read access to a setuid binary. It uses the clone() syscall to create a child process that executes the target binary while the parent process attempts to read the file descriptor before execution completes.
Description
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
Exploits (1)
This exploit leverages a race condition in the Linux 2.4.x kernel's execve() system call to gain read access to a setuid binary. It uses the clone() syscall to create a child process that executes the target binary while the parent process attempts to read the file descriptor before execution completes.