cve/2013/CVE-2013-1959.md

CVE-2013-1959

Description

kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process.

POC

Reference

• http://www.openwall.com/lists/oss-security/2013/04/29/1

Github

• https://github.com/HaxorSecInfec/autoroot.sh
• https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits