NetSight
IP …
medium4.6Public exploit code

CVE-2005-2709

The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.14
Versions 2.2.27, 2.4.1, 2.4.2, 2.4.3, 2.4.4

Weakness classification

CWE-399

References