Sploitus

Exploit for Linux kernel ptrace privilege elevation vulnerability

saint Β· 2007-06-27

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=SAINT:35D6164E53BE4595EDA7AE1BE88D50A1
Added: 06/27/2007  
CVE: CVE-2003-0127  
BID: 7112  
OSVDB: 4565  


### Background

`**ptrace**` is a Linux system call which enables a parent process to observe and control another process. 

### Problem

Due to a failure by the kernel to restrict trace permissions, a local attacker could gain root privileges by attaching to specific root spawned processes. 

### Resolution

Upgrade to Linux kernel 2.2.25 or 2.4.21 or higher, or apply a fix from your Linux vendor. 

### References

http://www.kb.cert.org/vuls/id/628849   


### Limitations

There may be a delay before the exploit succeeds. 

### Platforms

Linux