CVE-2001-1127

The provided text describes a local buffer overflow vulnerability in Progress Database programs due to insufficient bounds checking in strcpy functions. This could allow arbitrary code execution with elevated privileges, potentially leading to root access.

This exploit targets a buffer overflow in the Progress Database's sqlcpp program, allowing arbitrary code execution via a crafted environment variable and command-line argument. The shellcode spawns a /bin/sh shell.