Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-1191. PoCs published by Adam Morrison, Joe Zbiciak.
AI-analyzed exploit summary This exploit leverages a buffer overflow in the `chkey` program (setuid root) to overwrite stdio's `iob[]` array, enabling arbitrary memory writes and execution of a shellcode payload. It targets SPARC systems and requires precise calculation of library addresses and PLT offsets.
Description
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Exploits (2)
This exploit leverages a buffer overflow in the `chkey` program (setuid root) to overwrite stdio's `iob[]` array, enabling arbitrary memory writes and execution of a shellcode payload. It targets SPARC systems and requires precise calculation of library addresses and PLT offsets.
This exploit targets a buffer overflow vulnerability in Solaris 2.5.1's /usr/bin/ps. It manipulates environment variables and crafted input to overwrite critical structures, leading to arbitrary code execution.