CVE-1999-0069

This exploit targets a buffer overflow in the setuid program /usr/lib/fs/ufs/ufsdump on Solaris 2.6 i386. It uses a crafted device name to overflow the buffer, execute shellcode, and escalate privileges to root.

This exploit leverages a buffer overflow in the setuid program /usr/lib/fs/ufs/ufsdump to gain elevated privileges (EGID=tty) by overflowing a buffer with a crafted payload containing shellcode. The exploit calculates the stack address dynamically and injects shellcode to spawn a shell.