CVE-1999-0192
EXPLOITEDLinux - Buffer Overflow in Telnet Daemon via TERMCAP Environment Variable
Title source: llmExploitation Summary
CVE-1999-0192 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including sk8, m0f0.
AI-analyzed exploit summary This exploit targets a buffer overflow in libtermcap's tgetent() function (CVE-1999-0192), allowing local privilege escalation via a crafted termcap file. It leverages shellcode injection and stack manipulation to spawn a root shell when executed against vulnerable setuid programs like xterm.
Description
Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
Exploits (2)
This exploit targets a buffer overflow in libtermcap's tgetent() function (CVE-1999-0192), allowing local privilege escalation via a crafted termcap file. It leverages shellcode injection and stack manipulation to spawn a root shell when executed against vulnerable setuid programs like xterm.
This exploit targets a buffer overflow in libtermcap's tgetent() function (CVE-1999-0192) to achieve local privilege escalation via xterm. It crafts a malicious termcap file with NOPs, a return address, and shellcode to spawn a shell.