high7.2Public exploit code
CVE-2007-1189
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel me…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Plan 9 Kernel - 'devenv.c OTRUNC/pwrite' Local Privilege Escalation2007-02-28 · local · plan9 · Verified
Impact
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by (1) modifying the iseve function to gain privileges and (2) making the devpermcheck function grant unrestricted device permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bell Labs | Plan 9 | All versions |
References
- NVD record
- CVE.org record
- http://kernelspace.us/itheft.c
- http://lists.immunitysec.com/pipermail/dailydave/2007-February/004118.html
- http://osvdb.org/34956
- http://www.securityfocus.com/bid/22749
- https://www.exploit-db.com/exploits/3383
- http://kernelspace.us/itheft.c
- http://lists.immunitysec.com/pipermail/dailydave/2007-February/004118.html
- http://osvdb.org/34956
- http://www.securityfocus.com/bid/22749
- https://www.exploit-db.com/exploits/3383