CVE-2013-0160

Linux Kernel <= 3.7.9 - Sensitive Keystroke Timing Exposure via inotify on /dev/ptmx

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-0160. PoCs published by vladz.

AI-analyzed exploit summary This PoC exploits CVE-2013-0160, a keystroke timing attack on /dev/ptmx to determine the password length of a local user running 'su -'. It monitors /dev/ptmx for modifications and counts events to infer password length.

Description

The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device.

Exploits (1)

exploitdb WORKING POC

by vladz · bashlocallinux

https://www.exploit-db.com/exploits/24459

View Code ZIP pw:eip

This PoC exploits CVE-2013-0160, a keystroke timing attack on /dev/ptmx to determine the password length of a local user running 'su -'. It monitors /dev/ptmx for modifications and counts events to infer password length.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Moderate

Reliability

Reliable

Target: Linux kernel (tested on Debian 6.0.5 with kernel 2.6.32-5-amd64)

No auth needed

Prerequisites: Local access to the target system · Ability to execute code on the target system

MITRE ATT&CK