CVE-2008-3531
FreeBSD 7.0-7.1 - Local Privilege Escalation via Stack-Based Buffer Overflow in vfs_mount.c
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-3531. PoCs published by Patroklos Argyroudis, test-one9.
AI-analyzed exploit summary This exploit leverages a buffer overflow in FreeBSD's nmount system call (CVE-2008-3531) to achieve local privilege escalation by overwriting kernel memory with shellcode that modifies the current process's credentials to root.
Description
Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of "user defined data" in "certain error conditions."
Exploits (2)
This exploit leverages a buffer overflow in FreeBSD's nmount system call (CVE-2008-3531) to achieve local privilege escalation by overwriting kernel memory with shellcode that modifies the current process's credentials to root.
The repository contains only a minimal README with no exploit code or technical details. It references CVE-2008-3531 but provides no functional PoC or analysis.