Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0125. PoCs published by segv, Alvaro Martinez Echevarria.
AI-analyzed exploit summary This exploit leverages a buffer overflow in /bin/mailx to execute arbitrary code, allowing an attacker to read files accessible by the 'mail' group. The PoC requires setting the SHELL environment variable to invoke the exploit.
Description
Buffer overflow in SGI IRIX mailx program.
Exploits (2)
This exploit leverages a buffer overflow in /bin/mailx to execute arbitrary code, allowing an attacker to read files accessible by the 'mail' group. The PoC requires setting the SHELL environment variable to invoke the exploit.
This exploit leverages a buffer overflow in the /bin/mailx program via the HOME environment variable to execute arbitrary shellcode, potentially gaining group 'mail' privileges. It uses a combination of NOP sleds and shellcode to achieve remote code execution.