CVE-1999-0767
Solaris - Buffer Overflow via LC_MESSAGES Environmental Variable
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-1999-0767. PoCs published by UNYUN, [email protected], Georgi Guninski.
AI-analyzed exploit summary This exploit targets a buffer overflow in libc's handling of the LC_MESSAGES environment variable on Solaris/SPARC systems. It crafts a malicious environment variable to overflow a buffer and execute shellcode, leading to local privilege escalation.
Description
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
Exploits (5)
This exploit targets a buffer overflow in libc's handling of the LC_MESSAGES environment variable on Solaris/SPARC systems. It crafts a malicious environment variable to overflow a buffer and execute shellcode, leading to local privilege escalation.
This exploit leverages a buffer overflow in libc's handling of the LC_MESSAGES environment variable to execute arbitrary shellcode, granting root privileges on vulnerable Solaris systems. It crafts a malicious input file and manipulates environment variables to trigger the overflow in the `arp` command.
This exploit targets a buffer overflow in libc's handling of the LC_MESSAGES environment variable on Solaris/SPARC systems. It leverages a stack-based overflow to execute arbitrary shellcode, granting root privileges via a vulnerable suid binary.
This exploit targets a buffer overflow in libc's handling of the LC_MESSAGES environment variable on AIX 4.2/4.1 and Solaris systems. It leverages a suid root program linked against libc to execute arbitrary code (shellcode) and gain root privileges.
This script exploits a buffer overflow in libc's handling of the LC_MESSAGES environment variable to gain root privileges on AIX or Solaris systems. It iterates through different buffer sizes to trigger the overflow in a suid root program linked against libc.