Files
CVEs-PoC/2005/CVE-2005-2709.md
T
2024-06-18 02:51:15 +02:00

19 lines
907 B
Markdown

### [CVE-2005-2709](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20n%2Fa%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
### POC
#### Reference
- http://www.securityfocus.com/archive/1/427981/100/0/threaded
- http://www.securityfocus.com/archive/1/428028/100/0/threaded
#### Github
No PoCs found on GitHub currently.