CVE-2008-5736

This exploit targets a FreeBSD kernel vulnerability (CVE-2008-4946) in the protosw structure to overwrite the credential structure, granting root privileges (euid=0) to the attacker's process. It uses memory mapping and a crafted payload to achieve local privilege escalation.

This exploit leverages a null pointer dereference in FreeBSD's Netgraph implementation (CVE-2008-5736) to achieve local privilege escalation. It maps the null page, injects a jump to shellcode, and triggers the vulnerability via a netgraph socket to gain root privileges.