Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0993. PoCs published by caddis.
AI-analyzed exploit summary This exploit targets a format string vulnerability in the BSD chpass utility (CVE-2000-0993) to achieve remote code execution. It uses environment variables to inject shellcode and manipulate memory addresses via format string specifiers.
Description
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
Exploits (1)
This exploit targets a format string vulnerability in the BSD chpass utility (CVE-2000-0993) to achieve remote code execution. It uses environment variables to inject shellcode and manipulate memory addresses via format string specifiers.