CVE-2001-0459
AfterStep ascdc - Local Privilege Escalation via Long Command Line Option
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0459. PoCs published by the itch, anonymous.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in ascdc (version 0.3-2-i386) via the -c, -d, or -m arguments, allowing arbitrary code execution. It leverages environment variables to overwrite the return address and execute shellcode, potentially gaining elevated privileges if ascdc is installed setuid.
Description
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option, or (3) -f option.
Exploits (2)
This exploit targets a buffer overflow vulnerability in ascdc (version 0.3-2-i386) via the -c, -d, or -m arguments, allowing arbitrary code execution. It leverages environment variables to overwrite the return address and execute shellcode, potentially gaining elevated privileges if ascdc is installed setuid.
This exploit targets a buffer overflow vulnerability in ascdc (CVE-2001-0459) via the -d argument, allowing arbitrary code execution. It uses a NOP sled and shellcode to spawn a shell, leveraging insufficient bounds checking in the program.