cve/2010/CVE-2010-3850.md
2024-05-26 14:27:05 +02:00

938 B

CVE-2010-3850

Description

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

POC

Reference

No PoCs from references.

Github