CVE-2012-0056
EXPLOITEDLinux Kernel < 3.0.18 - Privilege Escalation via /proc/<pid>/mem Write
Title source: llmExploitation Summary
CVE-2012-0056 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including zx2c4, pythonone, srclib.
AI-analyzed exploit summary This exploit leverages a Linux kernel vulnerability (CVE-2012-0056) to achieve local privilege escalation by manipulating file descriptors and injecting shellcode into the 'su' binary's memory space.
Description
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
Exploits (4)
This exploit leverages a Linux kernel vulnerability (CVE-2012-0056) to achieve local privilege escalation by manipulating file descriptors and injecting shellcode into the 'su' binary's memory space.
This exploit leverages a memory corruption vulnerability in the Linux kernel (CVE-2012-0056) to achieve local privilege escalation by manipulating file descriptors and injecting shellcode into the 'su' binary's memory space.
This repository contains a working exploit for CVE-2012-0056, a Linux local privilege escalation vulnerability in the /proc/pid/mem interface. The exploit leverages improper permission checks to write arbitrary memory to SUID processes, bypassing ASLR and self_exec_id protections.
This repository contains a functional local privilege escalation exploit (mempodipper) for CVE-2012-0056, targeting a vulnerability in the Linux kernel's memory handling. The exploit leverages ptrace and /proc mem manipulation to achieve root access.