CVE-2013-4362
davfs2 1.4.6-1.4.7 - Privilege Escalation via System Function in kernel_interface.c and mount_davfs.c
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-4362. PoCs published by Lorenzo Cantoni, notclement.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in davfs2 (CVE-2013-4362) by manipulating the MODPROBE_OPTIONS environment variable to load a malicious kernel module, which then executes arbitrary user-mode code as root.
Description
WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function.
Exploits (2)
This exploit leverages a privilege escalation vulnerability in davfs2 (CVE-2013-4362) by manipulating the MODPROBE_OPTIONS environment variable to load a malicious kernel module, which then executes arbitrary user-mode code as root.
This repository contains scripts to automate the exploitation of CVE-2013-4362, a local privilege escalation vulnerability in davfs2 versions 1.4.6 and 1.4.7. The exploit leverages the coda kernel module to gain root privileges via a reverse shell.