CVE-1999-0866

UnixWare - Local Buffer Overflow in xauto

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0866. PoCs published by Brock Tellier.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in SCO UnixWare's /usr/X/bin/xauto, leveraging a system design issue to gain root privileges. It uses shellcode to execute /tmp/ui, which is a compiled binary granting a root shell.

Description

Buffer overflow in UnixWare xauto program allows local users to gain root privilege.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Brock Tellier · clocalsco

https://www.exploit-db.com/exploits/19656

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in SCO UnixWare's /usr/X/bin/xauto, leveraging a system design issue to gain root privileges. It uses shellcode to execute /tmp/ui, which is a compiled binary granting a root shell.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: SCO UnixWare 7.x (xauto)

No auth needed

Prerequisites: Access to a vulnerable UnixWare 7.x system · Ability to compile and execute the exploit binary

MITRE ATT&CK