Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0301. PoCs published by Joe Zbiciak.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Solaris 2.5.1's /usr/bin/ps command, allowing local privilege escalation to root by overwriting internal data structures. It uses a crafted environment variable and malformed arguments to trigger the overflow.
Description
Buffer overflow in SunOS/Solaris ps command.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Joe Zbiciak · bashlocalunix
https://www.exploit-db.com/exploits/19168
This exploit targets a buffer overflow vulnerability in Solaris 2.5.1's /usr/bin/ps command, allowing local privilege escalation to root by overwriting internal data structures. It uses a crafted environment variable and malformed arguments to trigger the overflow.
Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Complex
Reliability
Reliable
Target:
Solaris 2.5.1 /usr/bin/ps
No auth needed
Prerequisites:
Access to a vulnerable Solaris 2.5.1 system · Local user access
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_sun
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/149
Scores
EPSS
0.0078
EPSS Percentile
51.1%
Details
Status
published
Products (7)
sun/solaris
2.4
sun/solaris
2.5
sun/solaris
2.5.1
sun/sunos
5.3
sun/sunos
5.4
sun/sunos
5.5
sun/sunos
5.5.1
Published
Aug 01, 1997
Tracked Since
Feb 18, 2026