CVE-2005-3257
Linux Kernel 2.6.12 - Privilege Escalation via KDSKBSENT ioctl
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3257. PoCs published by Rudolf Polzer.
AI-analyzed exploit summary This exploit leverages a Linux kernel vulnerability (CVE-2005-3257) where unprivileged users can modify the console keymap to inject arbitrary commands. The provided `loadkeys` command redefines a key to execute a scripted macro, potentially leading to privilege escalation when another user interacts with the console.
Description
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
Exploits (1)
This exploit leverages a Linux kernel vulnerability (CVE-2005-3257) where unprivileged users can modify the console keymap to inject arbitrary commands. The provided `loadkeys` command redefines a key to execute a scripted macro, potentially leading to privilege escalation when another user interacts with the console.