Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0641. PoCs published by kingcope.
AI-analyzed exploit summary This exploit leverages the FreeBSD telnet daemon's failure to sanitize LD_PRELOAD environment variables, allowing local or remote privilege escalation to root by preloading a malicious shared library. The PoC includes a compiled library that spawns a root shell when loaded.
Description
sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client, as demonstrated by an LD_PRELOAD value that references a malicious library.
Exploits (1)
This exploit leverages the FreeBSD telnet daemon's failure to sanitize LD_PRELOAD environment variables, allowing local or remote privilege escalation to root by preloading a malicious shared library. The PoC includes a compiled library that spawns a root shell when loaded.