Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0501. PoCs published by IhaQueR.
AI-analyzed exploit summary This PoC demonstrates an information disclosure vulnerability in the Linux /proc filesystem by reading the environment variables of a setuid process. It forks a child process that reads the parent's /proc/[pid]/environ file while the parent executes a setuid binary (ping).
Description
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
Exploits (1)
This PoC demonstrates an information disclosure vulnerability in the Linux /proc filesystem by reading the environment variables of a setuid process. It forks a child process that reads the parent's /proc/[pid]/environ file while the parent executes a setuid binary (ping).