CVE-2014-4943 PoC — Linux kernel 权限许可和访问控制问题漏洞

Source

https://github.com/redes-2015/l2tp-socket-bug

Associated Vulnerability

Title:Linux kernel 权限许可和访问控制问题漏洞 (CVE-2014-4943)
Description:The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

Description

Estudo e apresentação do bug CVE-2014-4943 para a disciplina MAC0448

Readme

CVE-2014-4943
=============

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6
allows local users to gain privileges by leveraging data-structure differences
between an l2tp socket and an inet socket.

CVSS v2 Base Score: 6.9 (MEDIUM)

File Snapshot


 [4.0K]  /data/pocs/d9ed3ec68e682aec201e52a58620d3a5a1e0863f
├── [4.0K]  code
│   ├── [5.8K]  codigos.c
│   ├── [4.8K]  cve-2014-4943_poc.c
│   ├── [3.2K]  cve-simplificado.c
│   └── [ 837]  linux-3.10.0-123.el7-mac448.patch
├── [4.0K]  doc
│   └── [ 34K]  enunciado.pdf
├── [ 264]  README.md
└── [4.0K]  slides
    ├── [ 138]  convertToPdf.sh
    ├── [216K]  pesquisaL2TP.odt
    ├── [197K]  slides.odp
    └── [802K]  slides.pdf

3 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!