Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-1894. PoCs published by anonymous.
AI-analyzed exploit summary This exploit leverages a race condition in PulseAudio (CVE-2009-1894) to achieve local privilege escalation by manipulating hard links and executing a shell with elevated privileges. The PoC creates a temporary directory, links the PulseAudio binary and a malicious shell binary, then exploits the race condition to execute the shell as root.
Description
Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink.
Exploits (2)
This exploit leverages a race condition in PulseAudio (CVE-2009-1894) to achieve local privilege escalation by manipulating hard links and executing a shell with elevated privileges. The PoC creates a temporary directory, links the PulseAudio binary and a malicious shell binary, then exploits the race condition to execute the shell as root.
This exploit leverages a setuid vulnerability in PulseAudio to escalate privileges to root. It involves placing files in a specific directory and executing a binary to gain root access, then installing a setuid shell for persistence.