cve/cves/2011/CVE-2011-1020.md

CVE-2011-1020

Description

The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/41770