Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-0257. PoCs published by anonymous.
AI-analyzed exploit summary This exploit targets a local privilege escalation vulnerability in Grsecurity Kernel PaX by manipulating memory mappings and triggering a fault to overlap kernel memory. It uses mmap and mprotect to set up executable memory regions and attempts to gain superuser privileges.
Description
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code
Exploits (1)
This exploit targets a local privilege escalation vulnerability in Grsecurity Kernel PaX by manipulating memory mappings and triggering a fault to overlap kernel memory. It uses mmap and mprotect to set up executable memory regions and attempts to gain superuser privileges.
References (13)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H