Exploitation Summary
EIP tracks 4 public exploits for CVE-2001-0653. PoCs published by RoMaN SoFt, Lucian Hudin, [email protected].
AI-analyzed exploit summary The vulnerability in Sendmail's debugging functionality allows a signed integer overflow via the '-d' switch, enabling arbitrary memory writes and potential full system compromise due to privilege elevation before dropping privileges.
Description
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
Exploits (4)
The vulnerability in Sendmail's debugging functionality allows a signed integer overflow via the '-d' switch, enabling arbitrary memory writes and potential full system compromise due to privilege elevation before dropping privileges.
The vulnerability in Sendmail's debugging functionality involves a signed integer overflow in the tTflag() function, allowing arbitrary memory writes via a large numeric value in the '-d' switch. This can lead to privilege escalation before Sendmail drops elevated privileges.
This exploit targets a signed integer overflow in Sendmail's debugging functionality (CVE-2001-0653) to achieve arbitrary memory writes and execute shellcode. It uses the '-d' command-line switch to manipulate the trace vector and gain root privileges.
This exploit leverages a signed integer overflow in Sendmail's tTflag() function via the '-d' command-line switch to overwrite memory and achieve arbitrary code execution. It constructs a malicious debug argument to overwrite the GOT entry of setuid, redirecting execution to shellcode.