CVE-2005-1589
Linux Kernel < 2.6.12 - Denial of Service and Arbitrary Code Execution via pkt_ioctl Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-1589. PoCs published by alert7.
AI-analyzed exploit summary This PoC exploits a vulnerability in the pktcdvd driver in Linux kernels up to 2.6.12-rc4 by writing arbitrary data to the IDT (Interrupt Descriptor Table), causing a system crash. It demonstrates a denial-of-service (DoS) condition but does not include a root shell or further exploitation.
Description
The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264.
Exploits (1)
This PoC exploits a vulnerability in the pktcdvd driver in Linux kernels up to 2.6.12-rc4 by writing arbitrary data to the IDT (Interrupt Descriptor Table), causing a system crash. It demonstrates a denial-of-service (DoS) condition but does not include a root shell or further exploitation.