Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2005-3784

Description

The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.

POC

Reference

- http://www.securityfocus.com/archive/1/427981/100/0/threaded

- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174078

- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9080

Github

No PoCs found on GitHub currently.