Exploitation Summary
EIP tracks 3 public exploits for CVE-2000-0389. PoCs published by Jim Paris, duke.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the 'ksu' utility of MIT Kerberos versions prior to 1.1.1. It uses shellcode to execute 'sh' and gain root access by overflowing the buffer with a carefully crafted payload.
Description
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
Exploits (3)
This exploit targets a buffer overflow vulnerability in the 'ksu' utility of MIT Kerberos versions prior to 1.1.1. It uses shellcode to execute 'sh' and gain root access by overflowing the buffer with a carefully crafted payload.
This exploit targets a buffer overflow vulnerability in the krb_rd_req() function of Kerberos 4 compatibility code in MIT Kerberos 5 and other implementations. It crafts a malicious packet to overflow the buffer and execute arbitrary shellcode, leading to remote code execution (RCE) with root privileges.
This exploit targets a buffer overflow vulnerability in the krb_rd_req() function of MIT Kerberos 5 (versions 1.0.x, 1.1, 1.1.1) and Kerberos 4 (patch level 10 and prior). It leverages a stack-based overflow in krshd to execute arbitrary shellcode, potentially granting root access.