CVE-2006-3824
systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow.
- Affected products
- Sun Solaris
- Sun Solaris
- = 10.0
- CVSS 2.0
- 4.9 MEDIUM
- EPSS
- 1.0% (60th percentile)
- NVD status
- Modified
- Published
- 2006-07-25
CVE-2006-3824 at NVD
8 known exploits for CVE-2006-3824
Proof-of-concept code and exploit modules indexed by Sploitus
exploits
Solaris 10 sysinfo(2) - Local Kernel Memory Disclosure Exploit
Solaris 10 sysinfo(2) Local Kernel Memory Disclosure Exploit
sysinforaptor.txt
Solaris 10 sysinfo(2) Local Kernel Memory Disclosure Exploit
Solaris 10 sysinfo(2) - Local Kernel Memory Disclosure (2)
Solaris 10 sysinfo(2) - Local Kernel Memory Disclosure (2)
Solaris 10 - 'sysinfo()' Local Kernel Memory Disclosure (1)