Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-0736. PoCs published by alert7, sd.
AI-analyzed exploit summary This exploit targets a local privilege escalation vulnerability in Linux kernels up to 2.6.11 due to an integer overflow in sys_epoll_wait. It overwrites kernel memory to escalate privileges to root by manipulating the IDT and thread structures.
Description
Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
Exploits (2)
This exploit targets a local privilege escalation vulnerability in Linux kernels up to 2.6.11 due to an integer overflow in sys_epoll_wait. It overwrites kernel memory to escalate privileges to root by manipulating the IDT and thread structures.
This exploit leverages a local integer overflow vulnerability in the Linux kernel (2.6.11 and below) to overwrite low kernel memory, facilitating privilege escalation. It manipulates the epoll subsystem to achieve arbitrary kernel memory writes and modifies the IDT to execute a custom stub in ring 0.