CVE-2010-4258 - Exploit based on a faulty clone(2) implementation in Linux < 2.6.36.2 that allows overwrite of arbitrary kernel word with NULL. Research and personal-security use only.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Investigating this bug: http://permalink.gmane.org/gmane.linux.network/192898HEAD master	Jason A. Donenfeld	2011-04-20	1	-0/+45
\|
*	Pidmap deref in the exploit.	Jason A. Donenfeld	2011-04-20	2	-0/+214
\|
*	New null pointer deref.	Jason A. Donenfeld	2011-04-20	1	-0/+29
\|
*	Add test for CVE-2010-2960	Jason A. Donenfeld	2011-03-10	1	-0/+11
\|
*	add date	Jason A. Donenfeld	2011-03-10	1	-0/+1
\|
*	Add introductory message to socket_test.	Jason A. Donenfeld	2011-03-10	1	-0/+12
\|
*	Give credit.	Jason A. Donenfeld	2011-03-09	1	-0/+4
\|
*	Add netfilter oops test.	Jason A. Donenfeld	2011-03-09	2	-9/+36
\|
*	Usleep	Jason A. Donenfeld	2011-03-09	1	-18/+4
\|
*	Dual shutdown.	Jason A. Donenfeld	2011-03-09	1	-5/+9
\|
*	Flip order more.	Jason A. Donenfeld	2011-03-09	1	-7/+8
\|
*	OOpsie daise.	Jason A. Donenfeld	2011-03-09	1	-0/+6
\|
*	Flip around junk delivery.	Jason A. Donenfeld	2011-03-09	1	-18/+7
\|
*	Fork and accept and shutdown.	Jason A. Donenfeld	2011-03-09	1	-49/+74
\|
*	Better error reporting.	Jason A. Donenfeld	2011-03-09	1	-0/+9
\|
*	Try exploiting this bug: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=720dc34bbbe9493c7bd48b2243058b4e447a929d	Jason A. Donenfeld	2011-03-09	1	-0/+59
\|
*	Experiment with CVE-2011-1076.	Jason A. Donenfeld	2011-03-09	1	-0/+14
\|
*	Deadlock code.	Jason A. Donenfeld	2011-03-02	1	-0/+20
\|
*	Non-forking socket code.	Jason A. Donenfeld	2011-02-28	1	-19/+23
\|
*	Fix ret test.	Jason A. Donenfeld	2011-02-28	1	-1/+1
\|
*	Simplify logic of socket test.	Jason A. Donenfeld	2011-02-28	1	-17/+22
\|
*	Initialize socket at start so that if the econet module isn't loaded, it will be before we look for symbols.	Jason A. Donenfeld	2011-02-28	2	-2/+14
\|
*	Work on 32bit instead.	Jason A. Donenfeld	2011-02-28	1	-3/+4
\|
*	Test seeking to zero in arrays.	Jason A. Donenfeld	2011-02-28	1	-0/+18
\|
*	Sleeping no longer neccessary.	Jason A. Donenfeld	2011-02-28	2	-2/+2
\|
*	Explanitory comment.	Jason A. Donenfeld	2011-02-28	1	-1/+1
\|
*	Add output status line.	Jason A. Donenfeld	2011-02-28	1	-0/+1
\|
*	First rendition of pktcdvd deref.	Jason A. Donenfeld	2011-02-28	1	-0/+217
\|
*	New line.	Jason A. Donenfeld	2011-02-28	1	-1/+1
\|
*	Play around with divide by zeroing.	Jason A. Donenfeld	2011-02-27	1	-0/+15
\|
*	Use more robust code that forks and connects to itself.	Jason A. Donenfeld	2011-02-27	1	-16/+24
\|
*	Add val 12 case.	Jason A. Donenfeld	2011-02-27	1	-1/+1
\|
*	Add test function for sockets.	Jason A. Donenfeld	2011-02-27	1	-0/+39
\|
*	Add run script to vm.	Jason A. Donenfeld	2011-02-27	1	-0/+2
\|
*	Put in todos.	Jason A. Donenfeld	2011-02-27	1	-1/+2
\|
*	Receive some shit.	Jason A. Donenfeld	2011-02-27	1	-4/+17
\|
*	Compile right with headers.	Jason A. Donenfeld	2011-02-27	1	-1/+3
\|
*	Add set to 12 setsockopt.	Jason A. Donenfeld	2011-02-27	1	-1/+6
\|
*	Add skeleton for causing oops with CVE-2010-4165, while still using Dan's econet overwrite code.	Jason A. Donenfeld	2011-02-27	1	-0/+187
\|
*	Add skeleton of exploit.	Jason A. Donenfeld	2011-02-27	1	-0/+185
\|
*	Add Dan Rosenberg's Nelson exploits code that relies on econet vulns.	Jason A. Donenfeld	2011-02-27	1	-0/+276