Exploitation Summary
EIP tracks 3 public exploits for CVE-2000-0317. PoCs published by Theodor Ragnar Gislason, DiGiT.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the undocumented -r option of the lpset program in Solaris 7. It crafts a malicious buffer to overwrite the stack and execute arbitrary commands as root by leveraging hardcoded addresses for system(), setuid(), and /bin/sh.
Description
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
Exploits (3)
This exploit targets a buffer overflow vulnerability in the undocumented -r option of the lpset program in Solaris 7. It crafts a malicious buffer to overwrite the stack and execute arbitrary commands as root by leveraging hardcoded addresses for system(), setuid(), and /bin/sh.
This exploit targets a buffer overflow vulnerability in the undocumented -r option of the lpset program in Solaris 7. It uses a crafted buffer with SPARC shellcode to execute arbitrary commands as root by overwriting the return address.
This exploit targets a buffer overflow vulnerability in the undocumented -r option of the lpset program in Solaris 2.7. It uses a crafted buffer with shellcode to execute arbitrary commands as root.