CVE-2010-3850

/* * half-nelsonc * * Linux Kernel < 26362 Econet Privilege Escalation Exploit * Jon Oberheide <jon@oberheideorg> * jonoberheideorg * * Information: * * cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2010-3848 * * Stack-based buffer overflow in the econet_sendmsg function in * net/econet/af_econetc in ...

/* * Linux Kernel <= 2637 local privilege escalation * by Dan Rosenberg * @djrbliss on twitter * * Usage: * gcc full-nelsonc -o full-nelson * /full-nelson * * This exploit leverages three vulnerabilities to get root, all of which were * discovered by Nelson Elhage: * * CVE-2010-4258 * ------------- * This is the interesting one ...

This exploit leverages three vulnerabilities to escalate privileges The primary vulnerability is a kernel stack overflow, not a stack buffer overflow as the CVE description incorrectly states This may be the first public exploit for a kernel stack overflow, and it turns out to be a bit tricky due to some particulars of the econet vulnerability I ...

Linux kernel local privilege escalation exploit for versions 2637 and below It leverages three separate vulnerabilities to achieve root including a NULL pointer dereference, being able to assign arbitrary Econet addresses to arbitrary interfaces, and the ability to write a NULL word to an arbitrary kernel address ...