EDB-10255

functional

FreeBSD 8.0 Run-Time Link-Editor (RTLD) - Local Privilege Escalation

view exploit source exploit_dbverifiedtype localauthor kingcopepublished 2009-11-30catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-4147UShigh7.2Exploit
The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3) LD_LIBMAP_DISABLE…
CVE-2009-4146UShigh7.2Exploit
The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD environment variable, which allows local…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan