Exploitation Summary
EIP tracks 2 public exploits for CVE-2001-0565. PoCs published by Pablo Sor.
AI-analyzed exploit summary This exploit targets a buffer overflow in the -F option of Solaris mailx, allowing local privilege escalation to the 'mail' group. It uses shellcode to set the effective GID to 6 (mail) and spawns a shell.
Description
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.
Exploits (2)
This exploit targets a buffer overflow in the -F option of Solaris mailx, allowing local privilege escalation to the 'mail' group. It uses shellcode to set the effective GID to 6 (mail) and spawns a shell.
This exploit leverages a buffer overflow in the -F option of Solaris mailx to overwrite stack variables, including the return address, allowing local privilege escalation to the mail group. The PoC includes shellcode to spawn a shell and sets up the environment for execution.