Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1000. PoCs published by dreyer.
AI-analyzed exploit summary This exploit leverages a null pointer dereference in the Linux Kernel (CVE-2007-1000) to leak memory contents by manipulating IPv6 socket options. It maps a null page and uses getsockopt to read arbitrary kernel memory, dumping it to stdout.
Description
The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference.
Exploits (1)
This exploit leverages a null pointer dereference in the Linux Kernel (CVE-2007-1000) to leak memory contents by manipulating IPv6 socket options. It maps a null page and uses getsockopt to read arbitrary kernel memory, dumping it to stdout.