CVE-2009-2692
HIGH EXPLOITEDLinux kernel <2.6.30.4, <2.4.37.4 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2009-2692 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 10 public exploits from researchers including Metasploit, Ramon de C Valle, INetCop Security, including a Metasploit module exploits/linux/local/sock_sendpage.
AI-analyzed exploit summary This is a Metasploit module for CVE-2009-2692, a Linux kernel local privilege escalation vulnerability via sendpage. It exploits a NULL pointer dereference to gain root privileges.
Description
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
Exploits (10)
This is a Metasploit module for CVE-2009-2692, a Linux kernel local privilege escalation vulnerability via sendpage. It exploits a NULL pointer dereference to gain root privileges.
This exploit targets a Linux kernel vulnerability (CVE-2009-2692) in the sendpage function, allowing local privilege escalation. It supports multiple architectures (i386, x86_64, ppc, ppc64) and includes techniques like the personality trick and SELinux mmap_zero permission bypass.
This exploit targets a NULL pointer dereference vulnerability in the Linux kernel's sock_sendpage() function, which can lead to local privilege escalation. It includes support for systems with COW credentials and SELinux enforcement by searching for exploitable types with mmap_zero permission.
This exploit leverages a NULL pointer dereference in the Linux kernel's sock_sendpage() function (CVE-2009-2692) to achieve local privilege escalation by manipulating the task_struct to reset UID and GID values. It targets specific kernel versions and architectures, including i386, x86_64, ppc, and ppc64.
This exploit leverages CVE-2009-2692, a local privilege escalation vulnerability in the Linux kernel's sock_sendpage() function. It manipulates kernel memory to escalate privileges to root by overwriting task_struct fields in the kernel.
This exploit targets CVE-2009-2692, a local privilege escalation vulnerability in Android kernels prior to August 2009. The exploit leverages a kernel vulnerability to gain root access on affected devices.
This exploit leverages a Linux kernel NULL pointer dereference vulnerability due to incorrect proto_ops initializations. It provides a tgz archive containing the exploit code, which can lead to local privilege escalation.
This is a writeup and commentary related to CVE-2009-2692, discussing an SELinux bypass vulnerability. It references external exploit code but does not contain functional exploit code itself.
This repository contains a compiled binary for CVE-2009-2692, a Linux null pointer dereference vulnerability. The binary is derived from Exploit-DB exploit 9545 and was compiled under CentOS 4.8 for educational purposes.
This Metasploit module exploits a Linux kernel NULL pointer dereference vulnerability (CVE-2009-2692) in the proto_ops struct, allowing local privilege escalation by mapping page 0 and executing arbitrary code in kernel context.
References (39)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H