CVE-2000-1119

IBM AIX - Buffer Overflow in setsenv Command

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-1119. PoCs published by Last Stage of Delirium.

AI-analyzed exploit summary This exploit targets a buffer overflow in the AIX setsenv binary to execute arbitrary code and gain root privileges. It uses a crafted environment variable to overwrite the return address and inject shellcode.

Description

Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Last Stage of Delirium · clocalaix

https://www.exploit-db.com/exploits/20452

View Code ZIP pw:eip

This exploit targets a buffer overflow in the AIX setsenv binary to execute arbitrary code and gain root privileges. It uses a crafted environment variable to overwrite the return address and inject shellcode.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: IBM AIX 4.1, 4.2, 4.3, 4.3.x

No auth needed

Prerequisites: Access to an AIX system with vulnerable setsenv binary · Ability to execute the exploit binary

MITRE ATT&CK