Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0037. PoCs published by morpheus[bd], Shevek.
AI-analyzed exploit summary This exploit leverages a vulnerability in Majordomo's wrapper script (CVE-2000-0037) to execute arbitrary commands with elevated privileges by passing the -C parameter to vulnerable scripts like bounce-remind. It writes a shell command to a temporary file and executes it via the wrapper, potentially granting a root shell.
Description
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
Exploits (2)
This exploit leverages a vulnerability in Majordomo's wrapper script (CVE-2000-0037) to execute arbitrary commands with elevated privileges by passing the -C parameter to vulnerable scripts like bounce-remind. It writes a shell command to a temporary file and executes it via the wrapper, potentially granting a root shell.
This exploit leverages a vulnerability in majordomo where passing the -C parameter to certain scripts via the setuid root wrapper allows execution of arbitrary commands with majordomo privileges. The PoC demonstrates privilege escalation by executing a shell script with elevated permissions.