Exploitation Summary
EIP tracks 5 public exploits for CVE-2000-0917.
PoCs published by Metasploit, VeNoMouS, sk8, including Metasploit module exploits/linux/misc/lprng_format_string.
AI-analyzed exploit summary This Metasploit module exploits a format string vulnerability in LPRng (CVE-2000-0917) to achieve remote code execution with root privileges. It uses brute-force techniques to overwrite memory addresses and execute shellcode.
Description
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Exploits (5)
This Metasploit module exploits a format string vulnerability in LPRng (CVE-2000-0917) to achieve remote code execution with root privileges. It uses brute-force techniques to overwrite memory addresses and execute shellcode.
This exploit targets a format string vulnerability in LPRng (versions 3.6.22-3.6.24) on RedHat 7.0 and Slackware 7.0, allowing remote root access via port 515/tcp. It constructs a malicious buffer with shellcode and format string specifiers to overwrite memory addresses.
This exploit targets a buffer overflow vulnerability in LPRng (CVE-2000-0917) to achieve remote root access on x86 Linux systems. It uses a combination of format string manipulation and shellcode injection to overwrite the EIP and execute arbitrary code.
This exploit targets a format string vulnerability in LPRng (CVE-2000-0917) to achieve remote code execution. It uses a crafted format string to overwrite memory addresses and execute shellcode, providing a reverse shell.
This Metasploit module exploits a format string vulnerability in LPRng (CVE-2000-0917) to achieve remote code execution (RCE) with root privileges. It uses brute-force techniques to overwrite memory addresses and execute shellcode via a format string attack.