Exploitation Summary
EIP tracks 2 public exploits for CVE-2001-0652. PoCs published by Nsfocus.
AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in Solaris 8 x86's xlock utility via the XUSERFILESEARCHPATH environment variable. It leverages shellcode execution to achieve local privilege escalation by overwriting critical memory structures.
Description
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
Exploits (2)
This exploit targets a heap overflow vulnerability in Solaris 8 x86's xlock utility via the XUSERFILESEARCHPATH environment variable. It leverages shellcode execution to achieve local privilege escalation by overwriting critical memory structures.
This exploit targets a heap overflow vulnerability in xlock on Solaris SPARC systems, allowing local privilege escalation to root via a crafted environment variable. It uses shellcode to spawn a shell and calculates the return address dynamically.