cve/cves/2008/CVE-2008-4210.md

CVE-2008-4210

Description

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.

POC

Reference

No PoCs from references.

Github

• https://github.com/0b0111100/2008

ExploitDB

• https://www.exploit-db.com/exploits/6851

Collections

• https://github.com/helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2008/CVE-2008-4210