CVE-2010-4210
HIGHFreeBSD 7.x < 7.3-RELEASE and 8.x < 8.0-RC1 - DoS and Memory Overwrite via pfs_getextattr
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4210. PoCs published by Babcia Padlina.
AI-analyzed exploit summary This exploit leverages a null pointer dereference in FreeBSD's pseudofs to overwrite the syscall table and execute arbitrary kernel code, achieving local privilege escalation to root. It uses the extattr_get_link function to trigger the vulnerability and injects shellcode to modify thread credentials.
Description
The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs.
Exploits (1)
This exploit leverages a null pointer dereference in FreeBSD's pseudofs to overwrite the syscall table and execute arbitrary kernel code, achieving local privilege escalation to root. It uses the extattr_get_link function to trigger the vulnerability and injects shellcode to modify thread credentials.
References (6)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H