NetSight
low2.1Public exploit code

CVE-2009-0028

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child proces…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.28
Versions 2.2.27, 2.4.36, 2.4.36.1, 2.4.36.2, 2.4.36.3

Weakness classification

References