Exploitation Summary
EIP tracks 4 public exploits for CVE-2000-0949. PoCs published by Michel Kaempf, Perry Harrington, Dvorak.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in LBNL traceroute (CVE-2000-0949) to achieve local privilege escalation. It manipulates heap metadata and injects shellcode to spawn a root shell.
Description
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
Exploits (4)
This exploit targets a buffer overflow vulnerability in LBNL traceroute (CVE-2000-0949) to achieve local privilege escalation. It manipulates heap metadata and injects shellcode to spawn a root shell.
This exploit targets a heap-based vulnerability in LBNL traceroute (CVE-2000-0949) by manipulating the `-g` argument to trigger a double-free condition, allowing arbitrary memory manipulation and local privilege escalation to root. It includes architecture-specific shellcode for i386 and SPARC systems.
This exploit targets a double-free vulnerability in LBNL traceroute (CVE-2000-0949) by manipulating the `-g` argument to overwrite heap structures, potentially achieving local root access. It constructs a malicious malloc header and injects shellcode to spawn a shell.
This exploit leverages a double-free vulnerability in LBNL traceroute's `savestr()` function to manipulate heap memory and achieve arbitrary write, potentially leading to local root access. The PoC demonstrates controlled corruption of malloc chunks to overwrite a return address with shellcode.