CVE-2001-0979
HP-UX 11.0 - Buffer Overflow via Long Command Line Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0979. PoCs published by watercloud, foo.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in HP-UX 11.11/11.0's swinstall/swverify utilities to achieve local privilege escalation. It leverages an environment variable (LANG) to overflow a buffer and execute shellcode, spawning a root shell.
Description
Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument.
Exploits (2)
This exploit targets a buffer overflow vulnerability in HP-UX 11.11/11.0's swinstall/swverify utilities to achieve local privilege escalation. It leverages an environment variable (LANG) to overflow a buffer and execute shellcode, spawning a root shell.
This exploit leverages a buffer overflow in HP-UX's swverify (setuid root) to execute arbitrary code with elevated privileges. It constructs a malicious buffer with NOP sleds, shellcode, and a targeted return address to hijack execution flow.