Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1294. PoCs published by qobaiashi.
AI-analyzed exploit summary This exploit targets a local privilege escalation vulnerability in the BlueZ Bluetooth stack (CVE-2005-1294) by manipulating the `ecx` register to point to a controlled memory region, then executing shellcode to gain root privileges. It uses a combination of `mmap` and `brk` to ensure the memory region is writable and executable.
Description
The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index.
Exploits (1)
This exploit targets a local privilege escalation vulnerability in the BlueZ Bluetooth stack (CVE-2005-1294) by manipulating the `ecx` register to point to a controlled memory region, then executing shellcode to gain root privileges. It uses a combination of `mmap` and `brk` to ensure the memory region is writable and executable.