Exploitation Summary
EIP tracks 4 public exploits for CVE-2005-0750. PoCs published by backdoored.net, qobaiashi, ilja van sprundel.
AI-analyzed exploit summary This exploit leverages a signed-buffer-index vulnerability in the Linux kernel's Bluetooth stack (CVE-2005-0750) to achieve local privilege escalation. It brute-forces kernel memory to overwrite a function pointer with shellcode, granting root access.
Description
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.
Exploits (4)
This exploit leverages a signed-buffer-index vulnerability in the Linux kernel's Bluetooth stack (CVE-2005-0750) to achieve local privilege escalation. It brute-forces kernel memory to overwrite a function pointer with shellcode, granting root access.
This exploit targets a signed-buffer-index vulnerability in the Linux kernel's Bluetooth subsystem (CVE-2005-0750) to achieve local privilege escalation. It manipulates the `ecx` register to point to a controlled memory region containing shellcode that modifies kernel structures to grant root privileges.
This code is a minimal stub for CVE-2005-0750, demonstrating the opening of an HCI socket with a negative protocol value. It lacks the actual exploit logic to trigger the signed-buffer-index vulnerability for privilege escalation.
This is a local privilege escalation exploit for CVE-2005-0750, targeting a vulnerability in the BlueZ Bluetooth stack on Linux kernels. It manipulates the `ecx` register to redirect execution to a shellcode payload, granting root access.