Exploitation Summary
EIP tracks 5 public exploits for CVE-1999-0040. PoCs published by jGgM, bloodmask, Ming Zhang.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in libXt (CVE-1999-0040) via xterm, using a crafted environment variable to execute arbitrary shellcode. The shellcode drops privileges (seteuid/setuid) and spawns a shell (/bin/sh).
Description
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Exploits (5)
This exploit targets a buffer overflow vulnerability in libXt (CVE-1999-0040) via xterm, using a crafted environment variable to execute arbitrary shellcode. The shellcode drops privileges (seteuid/setuid) and spawns a shell (/bin/sh).
This exploit targets a buffer overflow vulnerability in the libXt library (CVE-1999-0040) via the dtterm application. It constructs a malicious buffer with NOP sleds, shellcode, and a manipulated return address to achieve arbitrary code execution.
This exploit targets a buffer overflow vulnerability in libXt (CVE-1999-0040) on IRIX systems. It crafts a malicious buffer with NOP sleds, shellcode, and return addresses to execute arbitrary code via vulnerable setuid/setgid X11 applications.
This exploit targets a buffer overflow vulnerability in cxterm (CVE-1999-0040) by overflowing a buffer with NOP sleds and shellcode to execute arbitrary commands. It is designed for Linux systems, specifically tested on Slackware 3.1 and 3.2.
This exploit targets a buffer overflow vulnerability in xterm (CVE-1999-0040) by injecting shellcode into the buffer and manipulating the return address to execute arbitrary code. The shellcode spawns a /bin/sh shell.