CVE-1999-0826

FreeBSD - Buffer Overflow in angband

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0826. PoCs published by Brock Tellier.

AI-analyzed exploit summary This exploit targets a local buffer overflow in the angband game shipped with FreeBSD 3.3-RELEASE, leveraging a setgid games binary to escalate privileges. It uses a NOP sled and shellcode to spawn a shell with the group games privileges.

Description

Buffer overflow in FreeBSD angband allows local users to gain privileges.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Brock Tellier · clocalfreebsd

https://www.exploit-db.com/exploits/19653

View Code ZIP pw:eip

This exploit targets a local buffer overflow in the angband game shipped with FreeBSD 3.3-RELEASE, leveraging a setgid games binary to escalate privileges. It uses a NOP sled and shellcode to spawn a shell with the group games privileges.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: angband (FreeBSD 3.3-RELEASE)

No auth needed

Prerequisites: Local access to the target system · Presence of vulnerable angband binary

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/1151

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/840

Scores

EPSS 0.0060

EPSS Percentile 43.8%

Details

Status published

Products (1)

freebsd/freebsd 3.3

Published Dec 01, 1999

Tracked Since Feb 18, 2026