CVE-2006-3824

This exploit leverages a signedness error in the Solaris sysinfo(2) system call to trigger a kernel memory leak by passing a 0 variable count argument, causing a -1 argument to be used by the copyout function. It dumps kernel memory to a specified file.

This exploit leverages an integer overflow in Solaris' sysinfo() system call to disclose kernel memory. It allocates a large buffer and writes kernel memory contents to a file specified by the user.