CVE-2007-5225
SunOS 8-10 - Unauthenticated Memory Read via FIFO I_PEEK ioctl
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-5225. PoCs published by Marco Ivaldi, qaaz.
AI-analyzed exploit summary This exploit leverages an integer signedness error in Solaris FIFO filesystems (named pipes) via a negative value passed to the I_PEEK ioctl, allowing local users to read kernel memory contents. The PoC dumps the leaked memory to a specified file.
Description
Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the I_PEEK ioctl.
Exploits (2)
This exploit leverages an integer signedness error in Solaris FIFO filesystems (named pipes) via a negative value passed to the I_PEEK ioctl, allowing local users to read kernel memory contents. The PoC dumps the leaked memory to a specified file.
This exploit leverages a Solaris fifofs I_PEEK kernel memory disclosure vulnerability to read arbitrary kernel memory. It creates a FIFO, manipulates memory protections, and uses the I_PEEK ioctl to dump kernel memory contents.