CVE-2001-0989

Pileup - Local Buffer Overflow via Long Command Line Arguments or Callsign

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0989. PoCs published by Charles Stevenson.

AI-analyzed exploit summary This exploit targets a local buffer overflow in the 'pileup' program to achieve privilege escalation. It crafts a malicious environment variable and uses shellcode to spawn a root shell.

Description

Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Charles Stevenson · clocallinux

https://www.exploit-db.com/exploits/1170

View Code ZIP pw:eip

This exploit targets a local buffer overflow in the 'pileup' program to achieve privilege escalation. It crafts a malicious environment variable and uses shellcode to spawn a root shell.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: pileup (version not specified)

No auth needed

Prerequisites: Local access to the target system · Presence of the vulnerable 'pileup' binary · Ability to execute the exploit binary

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Various Sources x_refsource_confirm

http://www.babbage.demon.co.uk/linux/pileup-1.2/pileup-1.2.tar.gz

Patch mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2001-07/0512.html

Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/3086

Scores

EPSS 0.0083

EPSS Percentile 52.6%

Details

Status published

Products (1)

richard_everitt/pileup 1.1

Published Jul 23, 2001

Tracked Since Feb 18, 2026