Vulnerability Details CVE-2007-1189
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by (1) modifying the iseve function to gain privileges and (2) making the devpermcheck function grant unrestricted device permissions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.2%
CVSS Severity
CVSS v2 Score 7.2
References
- http://kernelspace.us/itheft.c
- http://lists.immunitysec.com/pipermail/dailydave/2007-February/004118.html
- http://osvdb.org/34956
- http://www.securityfocus.com/bid/22749
- https://www.exploit-db.com/exploits/3383
- http://kernelspace.us/itheft.c
- http://lists.immunitysec.com/pipermail/dailydave/2007-February/004118.html
- http://osvdb.org/34956
- http://www.securityfocus.com/bid/22749
- https://www.exploit-db.com/exploits/3383