Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0038.
AI-analyzed exploit summary This is a classic stack-based buffer overflow exploit for xlock, leveraging a vulnerable command-line argument to overwrite the return address and execute arbitrary shellcode. The exploit targets a suid root binary to achieve local privilege escalation.
Description
Buffer overflow in xlock program allows local users to execute commands as root.
Exploits (2)
This is a classic stack-based buffer overflow exploit for xlock, leveraging a vulnerable command-line argument to overwrite the return address and execute arbitrary shellcode. The exploit targets a suid root binary to achieve local privilege escalation.
This exploit targets a buffer overflow vulnerability in xlock (CVE-1999-0038) to achieve local privilege escalation. It constructs a malicious environment variable and overflows the buffer to execute arbitrary shellcode, potentially granting root access.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H