CVE-1999-1041
SCO OpenServer and UNIX - Buffer Overflow via Long TERM Environment Variable or .mscreenrc Entry
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-1041.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in SCO OpenServer's mscreen utility. It constructs a malicious environment variable (TERM) with NOP sleds and shellcode to achieve remote code execution by overflowing the buffer and redirecting execution to the injected shellcode.
Description
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
Exploits (1)
This exploit targets a buffer overflow vulnerability in SCO OpenServer's mscreen utility. It constructs a malicious environment variable (TERM) with NOP sleds and shellcode to achieve remote code execution by overflowing the buffer and redirecting execution to the injected shellcode.