Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0998. PoCs published by Kevin Finisterre, truefinder.
AI-analyzed exploit summary This exploit targets a format string vulnerability in the 'top' utility on BSD systems, allowing arbitrary code execution to escalate privileges to the 'kmem' group. It uses a crafted format string to overwrite memory addresses and execute shellcode.
Description
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
Exploits (2)
This exploit targets a format string vulnerability in the 'top' utility on BSD systems, allowing arbitrary code execution to escalate privileges to the 'kmem' group. It uses a crafted format string to overwrite memory addresses and execute shellcode.
This exploit targets a format string vulnerability in the 'top' utility on BSD systems (prior to FreeBSD 4.2) to achieve arbitrary code execution. It leverages environment variables and crafted input to overwrite memory addresses, leading to privilege escalation via the kmem group.