CVE-2011-4062
FreeBSD 7.3-9.0-RC1 - Buffer Overflow via Long UNIX Socket Pathname in bind System Call
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4062. PoCs published by Shaun Colley.
AI-analyzed exploit summary This exploit demonstrates a heap overflow in FreeBSD's Unix domain sockets (CVE-2011-4062) by creating a server and client that manipulate the `sun_path` field to trigger a kernel panic or UID modification. The PoC loops the client to increase the likelihood of a crash.
Description
Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or possibly gain privileges via a bind system call with a long pathname for a UNIX socket.
Exploits (1)
This exploit demonstrates a heap overflow in FreeBSD's Unix domain sockets (CVE-2011-4062) by creating a server and client that manipulate the `sun_path` field to trigger a kernel panic or UID modification. The PoC loops the client to increase the likelihood of a crash.