Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dirty-cow]

Dirty COW (CVE-2016-5195) is a privilege escalation vulnerability in the Linux Kernel

8
votes
3answers
358 views

How do I create an invisible and persistent user on linux?

For my software security class we are required to hack into a server created by our professor. I have hacked into the server, and have the password for the root user. Now that I am root, I would ...
1
vote
0answers
328 views

Could not load library libcutils.so while injecting shellcode

I am working on my school thesis. I am trying to inject some shellcode into a shared library using Dirty Cow vulnerability on Android x86. My shellcode is written in asembly and only calls ...
0
votes
0answers
412 views

Huge Dirty COW - Privileged access to files like with Dirty COW possible?

Has anybody read the Huge Dirty COW writeup? https://medium.com/bindecy/huge-dirty-cow-cve-2017-1000405-110eca132de0 Am I correct that we can also shmem files using THP and achieve the same result ...
-1
votes
1answer
1k views

Dirty COW exploit by Bash

I've found many exploits for Dirty COW vulnerability with many methods that written in C programming language. But I want to test this vulnerability on a target that doesn't have gcc as C compiler (...
3
votes
3answers
3k views

DirtyCow Vulnerability exploit in ICE 120 image

I am trying to learn Penetration testing. While learning I was trying to practice on my own as well. I had found a vulnerable image called ICE 120 in internet which is a vulnerable web application and ...
1
vote
0answers
320 views

kernel panic after exploiting dirty cow on kernel 3.13.0

After exploiting the dirty cow vulnerabillity https://www.exploit-db.com/exploits/40839/ my ubuntu virtual machine keep getting a kernel panic after every reboot. What could possibly cause this ...
7
votes
1answer
9k views

Exploiting Dirty Cow using Metasploit

I'm testing on some of my Linux Virtual Machines trying to exploit the Dirty Cow Vulnerability and I'm not able to success using Metasploit. First of all... for interested users, a couple of links to "...
2
votes
2answers
525 views

Dirtycow runs (lib-c to root) fine but crashes on reboot

I have ubuntu 14.04.3 server running in a vm with kernel version 3.13.0-83-generic running. I have tested several PoC's gathered here. Most of them crash the kernel (not all the times but sometimes) ...
1
vote
2answers
151 views

Is dirtycow unharmful without shell access?

Let's say have a linux server to which only I have shell access and all other users shells are disabled. Is there any reason to be preoccupied?
3
votes
1answer
494 views

Does Linux “Dirty COW” Exploit allow for escalation outside a virtual machine?

Vulnerability CVE–2016–5195 deals with privilege escalation in Linux systems. In a virtual environment with hypervisor KVM and QEMU, can a virtual machine get access to it's host? If not, what is the ...
17
votes
2answers
3k views

How to make sure that my operating system is not affected by CVE-2016-5195 (Dirty COW)?

I am running following version of Linux operating system. Distributor ID: Debian Description: Debian GNU/Linux 7.2 (wheezy) Release: 7.2 Codename: wheezy I am not sure whether this ...
3
votes
0answers
1k views

Dirty cow freezing [closed]

I checked my Ubuntu PC for dirtycow vulnerability, by using following code I downloaded from here. I compiled and run this code and run.When i execute this code using cc . $ gcc cowroot.c -o ...
6
votes
2answers
5k views

Simple explanation of how Dirty COW works?

I am sure many of you remember the XKCD Heartbleed Explanation. In the same spirit, I would like to request an explanation for how the latest branded vulnerability, Dirty COW, works. Is it possible ...
3
votes
1answer
1k views

Does Linux “Dirty COW” Exploit allow for privilege escalation with SE protections in place?

Vulnerability CVE–2016–5195 deals with privilege escalation in Linux systems. As far as I can tell, this is by being able to gain write permissions where an attacker might only have read-only ...
1
vote
1answer
2k views

Does Dirty COW Affect OSX Kernel?

I attempted to compile the POC for Dirty COW on OSX (Disclaimer: not a C programmer). Here is the error: dirtycow.c: In function ‘procselfmemThread’: dirtycow.c:64:5: warning: implicit declaration of ...
69
votes
7answers
23k views

What is the possible impact of dirtyc0w a.k.a. “Dirty COW” bug?

I heard about Dirty COW but couldn't find any decent writeup on the scope of the bug. It looks like the exploit can overwrite any non-writable file, which makes me guess that local root is possible ...