Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0032.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the lpr program (CVE-1999-0032) by supplying a maliciously crafted argument to the -C option. It overwrites the stack with NOP sleds and shellcode to execute /bin/sh, potentially gaining elevated privileges if lpr is setuid/setgid.
Description
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
Exploits (2)
This exploit targets a buffer overflow vulnerability in the lpr program (CVE-1999-0032) by supplying a maliciously crafted argument to the -C option. It overwrites the stack with NOP sleds and shellcode to execute /bin/sh, potentially gaining elevated privileges if lpr is setuid/setgid.
This exploit leverages a stack-based buffer overflow in the lpr program (CVE-1999-0032) by supplying a maliciously crafted argument to the -C option. The payload includes NOP sleds and shellcode to spawn a /bin/sh, demonstrating arbitrary command execution with the privileges of the lpr process.