1 2 3 4 5 6
#!/bin/sh # DF-2952 PoC run (on the guest, as root) # Registers the victim with a poisoned root environment, then execs it as # an unprivileged user with an empty environment and scans the stack. set -e sh /tmp/df2952/iter.sh 1