Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0036. PoCs published by Jon Oberheide.
AI-analyzed exploit summary This exploit targets a buffer overflow in libvirt_proxy <= 0.5.1 (CVE-2009-0036) by sending a malformed packet header followed by a NOP sled and shellcode to achieve local privilege escalation. It leverages uninitialized memory in the validation check to overwrite EIP and execute arbitrary code as root.
Description
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.
Exploits (1)
This exploit targets a buffer overflow in libvirt_proxy <= 0.5.1 (CVE-2009-0036) by sending a malformed packet header followed by a NOP sled and shellcode to achieve local privilege escalation. It leverages uninitialized memory in the validation check to overwrite EIP and execute arbitrary code as root.