CVE-1999-1191

This exploit leverages a buffer overflow in the `chkey` program (setuid root) to overwrite stdio's `iob[]` array, enabling arbitrary memory writes and execution of a shellcode payload. It targets SPARC systems and requires precise calculation of library addresses and PLT offsets.

This exploit targets a buffer overflow vulnerability in Solaris 2.5.1's /usr/bin/ps. It manipulates environment variables and crafted input to overwrite critical structures, leading to arbitrary code execution.