Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0069. PoCs published by Cheez Whiz, smm.
AI-analyzed exploit summary This exploit targets a buffer overflow in the setuid program /usr/lib/fs/ufs/ufsdump on Solaris 2.6 i386. It uses a crafted device name to overflow the buffer, execute shellcode, and escalate privileges to root.
Description
Solaris ufsrestore buffer overflow.
Exploits (2)
This exploit targets a buffer overflow in the setuid program /usr/lib/fs/ufs/ufsdump on Solaris 2.6 i386. It uses a crafted device name to overflow the buffer, execute shellcode, and escalate privileges to root.
This exploit leverages a buffer overflow in the setuid program /usr/lib/fs/ufs/ufsdump to gain elevated privileges (EGID=tty) by overflowing a buffer with a crafted payload containing shellcode. The exploit calculates the stack address dynamically and injects shellcode to spawn a shell.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H