Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0835. PoCs published by Chris Evans.
AI-analyzed exploit summary This exploit demonstrates a local security-bypass vulnerability in the Linux kernel (CVE-2009-0835) by circumventing seccomp restrictions. It uses inline assembly to execute restricted system calls (chmod or stat) depending on the architecture (x86-64 or i386).
Description
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
Exploits (1)
This exploit demonstrates a local security-bypass vulnerability in the Linux kernel (CVE-2009-0835) by circumventing seccomp restrictions. It uses inline assembly to execute restricted system calls (chmod or stat) depending on the architecture (x86-64 or i386).