NetSight
low2.1Public exploit code

CVE-2005-0736

Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.

Affected products

VendorProductAffected versions
ConectivaLinux
Version 10.0
LinuxLinux Kernel
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5
RedhatEnterprise Linux
Version 4.0
RedhatEnterprise Linux Desktop
Version 4.0
RedhatFedora Core
Versions core_2.0, core_3.0

References