CVE-2013-2171
FreeBSD 9 Address Space Manipulation Privilege Escalation
Title source: metasploitExploitation Summary
EIP tracks 4 public exploits for CVE-2013-2171.
PoCs published by Metasploit, Hunger, 0xGabe, including Metasploit module exploits/freebsd/local/mmap.
AI-analyzed exploit summary This Metasploit module exploits CVE-2013-2171, a FreeBSD 9.0/9.1 privilege escalation vulnerability via address space manipulation. It uploads and executes a binary payload to achieve local privilege escalation.
Description
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.
Exploits (4)
This Metasploit module exploits CVE-2013-2171, a FreeBSD 9.0/9.1 privilege escalation vulnerability via address space manipulation. It uploads and executes a binary payload to achieve local privilege escalation.
This exploit leverages a mmap/ptrace vulnerability in FreeBSD 9.0/9.1 to achieve local privilege escalation by copying a malicious binary over a setuid binary (/usr/sbin/timedc) and executing it to spawn a root shell.
This exploit leverages a mmap/ptrace vulnerability in FreeBSD 9.0-9.1 to achieve local privilege escalation by manipulating memory mappings and process tracing. It replaces the memory of a privileged binary (/usr/sbin/timedc) with a shell payload to gain root access.
This Metasploit module exploits CVE-2013-2171, a FreeBSD 9.0/9.1 privilege escalation vulnerability via address space manipulation. It uploads a payload and exploit binary to a writable directory, then executes them to achieve local privilege escalation.