Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0763. PoCs published by Ben Williams, noir.
AI-analyzed exploit summary This exploit leverages a format string vulnerability in xlockmore (CVE-2000-0763) to achieve local privilege escalation by overwriting the stack and executing arbitrary shellcode with root privileges. The exploit calculates the necessary offsets dynamically to bypass ASLR-like protections and targets the setuid binary.
Description
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
Exploits (2)
This exploit leverages a format string vulnerability in xlockmore (CVE-2000-0763) to achieve local privilege escalation by overwriting the stack and executing arbitrary shellcode with root privileges. The exploit calculates the necessary offsets dynamically to bypass ASLR-like protections and targets the setuid binary.
This exploit targets a format string vulnerability in xlockmore (CVE-2000-0763) to achieve local privilege escalation. It leverages the -display option to overwrite stack values and execute arbitrary shellcode with root privileges.