Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-1158. PoCs published by Cristian Schipor.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the Solaris 2.4 and 2.5 passwd program, using shellcode to achieve remote code execution. The exploit constructs a malicious buffer with NOP sleds and shellcode to overwrite the return address and execute arbitrary code.
Description
Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.
Exploits (2)
This exploit targets a buffer overflow vulnerability in the Solaris 2.4 and 2.5 passwd program, using shellcode to achieve remote code execution. The exploit constructs a malicious buffer with NOP sleds and shellcode to overwrite the return address and execute arbitrary code.
This exploit targets a buffer overflow in Pluggable Authentication Modules (PAM) and unix_scheme on Solaris 2.5.(1). It uses a stack-based overflow via the passwd program to execute shellcode, potentially granting root access.