Starcrash’s illumos door-server disclosure

Field notes

The page explains illumos Doors as a low-latency RPC-style facility in which the kernel lends a client's remaining CPU timeslice to a server. It identifies issues in nscd, ipmgmtd, nwamd, reparsed, and zonestatd, and links to a full report and proof-of-concept bundle; the homepage says the findings did not yield meaningful privilege escalation.