CVE-1999-1534

Knox Software Arkeia - Buffer Overflow via HOME Environment Variable

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1534. PoCs published by Brock Tellier.

AI-analyzed exploit summary This exploit targets a local buffer overflow in Knox Software Arkeia 4.0 Backup's rnavc and nlserverd binaries via the HOME environment variable. It uses shellcode to execute a compiled binary (/tmp/ui) for privilege escalation to root.

Description

Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Brock Tellier · clocallinux

https://www.exploit-db.com/exploits/19511

View Code ZIP pw:eip

This exploit targets a local buffer overflow in Knox Software Arkeia 4.0 Backup's rnavc and nlserverd binaries via the HOME environment variable. It uses shellcode to execute a compiled binary (/tmp/ui) for privilege escalation to root.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Knox Software Arkeia 4.0 Backup

No auth needed

Prerequisites: Local access to the system · Presence of vulnerable Arkeia binaries · Compiled /tmp/ui binary for shell execution

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/661

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=93837184228248&w=2

Scores

EPSS 0.0108

EPSS Percentile 60.8%

Details

Status published

Products (1)

knox_software/arkeia 4.0

Published Sep 23, 1999

Tracked Since Feb 18, 2026