Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3527. PoCs published by Przemyslaw Frasunek.
AI-analyzed exploit summary This exploit targets a race condition in FreeBSD <= 6.4 between pipeclose() and knlist_cleardel(), leading to a NULL pointer dereference. It achieves local privilege escalation (LPE) by executing arbitrary kernel code to modify credentials and escape jail.
Description
Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption.
Exploits (1)
This exploit targets a race condition in FreeBSD <= 6.4 between pipeclose() and knlist_cleardel(), leading to a NULL pointer dereference. It achieves local privilege escalation (LPE) by executing arbitrary kernel code to modify credentials and escape jail.