CVE-2001-0526

Solaris 8 and earlier - Buffer Overflow via OPENWINHOME Environment Variable

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0526. PoCs published by 51.

AI-analyzed exploit summary This exploit targets a buffer overflow in Solaris 8's mailtool via the OPENWINHOME environment variable. It includes architecture-specific shellcode for x86 and Sparc to achieve local privilege escalation to the 'mail' group.

Description

Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable.

Exploits (1)

exploitdb WORKING POC VERIFIED

by 51 · clocalsolaris

https://www.exploit-db.com/exploits/20885

View Code ZIP pw:eip

This exploit targets a buffer overflow in Solaris 8's mailtool via the OPENWINHOME environment variable. It includes architecture-specific shellcode for x86 and Sparc to achieve local privilege escalation to the 'mail' group.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: OpenWindows mailtool (Solaris 8)

No auth needed

Prerequisites: Local access to a vulnerable Solaris 8 system · Ability to set environment variables

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/6626

Exploit, Patch, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2001-05/0258.html

Scores

EPSS 0.0093

EPSS Percentile 56.2%

Details

Status published

Products (1)

sun/solaris 8.0 (2 CPE variants)

Published Aug 14, 2001

Tracked Since Feb 18, 2026