Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0901. PoCs published by IhaQueR@IRCnet.
AI-analyzed exploit summary This exploit targets a format string vulnerability in screen versions 3.7.6 and prior, allowing local privilege escalation by manipulating the user ID variable when screen is setuid root. It crafts a malicious .screenrc file and executes screen to trigger the vulnerability.
Description
Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.
Exploits (1)
This exploit targets a format string vulnerability in screen versions 3.7.6 and prior, allowing local privilege escalation by manipulating the user ID variable when screen is setuid root. It crafts a malicious .screenrc file and executes screen to trigger the vulnerability.