Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-3850.
AI-analyzed exploit summary This is a functional privilege escalation exploit for Linux Kernel < 2.6.36.2, leveraging a kernel stack overflow in the Econet subsystem (CVE-2010-3850) combined with other vulnerabilities (CVE-2010-3848, CVE-2010-4073) to achieve root access. It uses a multi-process approach to manipulate kernel stack memory and overwrite critical structures.
Description
The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
Exploits (2)
This is a functional privilege escalation exploit for Linux Kernel < 2.6.36.2, leveraging a kernel stack overflow in the Econet subsystem (CVE-2010-3850) combined with other vulnerabilities (CVE-2010-3848, CVE-2010-4073) to achieve root access. It uses a multi-process approach to manipulate kernel stack memory and overwrite critical structures.
This exploit leverages three vulnerabilities (CVE-2010-4258, CVE-2010-3849, CVE-2010-3850) to achieve local privilege escalation on Linux kernels <= 2.6.37. It uses a NULL pointer dereference in the Econet protocol to trigger an OOPS under KERNEL_DS, allowing arbitrary kernel memory writes.