Sploitus

Exploit for Linux kernel ptrace privilege elevation vulnerability

CVE-2003-0127

saint · 2007-06-27

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=SAINT:25F9B7414C3280FA5002D541637A5636
Added: 06/27/2007  
CVE: [CVE-2003-0127](<https://vulners.com/cve/CVE-2003-0127>)  
BID: [7112](<http://www.securityfocus.com/bid/7112>)  
OSVDB: [4565](<http://www.osvdb.org/4565>)  


### Background

`**ptrace**` is a Linux system call which enables a parent process to observe and control another process. 

### Problem

Due to a failure by the kernel to restrict trace permissions, a local attacker could gain root privileges by attaching to specific root spawned processes. 

### Resolution

Upgrade to Linux kernel 2.2.25 or 2.4.21 or higher, or apply a fix from your Linux vendor. 

### References

<http://www.kb.cert.org/vuls/id/628849>  


### Limitations

There may be a delay before the exploit succeeds. 

### Platforms

Linux