full-nelson.c Linux Kernel 2.6.37 local privilege escalation
Blog : http://eromang.zataz.com
Twitter : / eromang
Timeline :
Exploit released the 2010-12-07 by Dan Rosenberg
CVE-2010-4258 reported the 2010-12-02 by Nelson Elhage
CVE-2010-3850 reported the 2010-10-18 by Nelson Elhage
CVE-2010-3849 reported the 2010-10-18 by Nelson Elhage
Provided by:
Dan Rosenberg
Nelson Elhage
Reference(s) :
CVE-2010-4258
CVE-2010-3850
CVE-2010-3849
Affected versions :
Linux Kernel before or equal to version 2.6.37
Tested on Ubuntu 10.10 server
Description:
This exploit leverages three vulnerabilities to get root, all of which were discovered by Nelson Elhage.
Demo :
uname -a
uid
gcc full-nelson.c -o full-nelson
./full-neslon
uid