CVE-2001-0279

Debian Linux - Buffer Overflow in sudo

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0279. PoCs published by MaXX.

AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in sudo's logging component (CVE-2001-0279) to achieve local privilege escalation. It manipulates heap memory structures to overwrite critical pointers and execute shellcode, granting root access.

Description

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.

Exploits (1)

exploitdb WORKING POC VERIFIED

by MaXX · clocallinux

https://www.exploit-db.com/exploits/20901

View Code ZIP pw:eip

This exploit targets a heap-based buffer overflow in sudo's logging component (CVE-2001-0279) to achieve local privilege escalation. It manipulates heap memory structures to overwrite critical pointers and execute shellcode, granting root access.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Complex

Reliability

Racy

Target: sudo 1.6.1-1 (Red Hat Linux 6.2)

Auth required

Prerequisites: Local user access · sudo binary present · Vulnerable sudo version

MITRE ATT&CK