Exploitation Summary
EIP tracks 3 public exploits for CVE-2004-1235. PoCs published by sd, Tim Hsu, Paul Starzetz.
AI-analyzed exploit summary This exploit targets a local privilege escalation vulnerability in Linux kernels 2.4 and 2.6 via sys_uselib. It manipulates memory mappings and VMA structures to achieve root access by exploiting race conditions and memory management flaws.
Description
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
Exploits (3)
This exploit targets a local privilege escalation vulnerability in Linux kernels 2.4 and 2.6 via sys_uselib. It manipulates memory mappings and VMA structures to achieve root access by exploiting race conditions and memory management flaws.
This exploit targets a race condition in the Linux kernel 2.4 series' `uselib()` system call to achieve local privilege escalation. It manipulates memory mappings and LDT entries to execute arbitrary code in kernel mode, ultimately resetting UIDs to gain root privileges.
This exploit targets a race condition in the Linux kernel's binfmt_elf uselib VMA handling (CVE-2004-1235) to achieve local privilege escalation. It manipulates memory mappings and LDT entries to execute arbitrary kernel code, ultimately gaining root privileges.