CVE-2001-1127

This exploit targets a buffer overflow in the Progress Database's sqlcpp program, allowing arbitrary code execution via a crafted environment variable and command-line argument. The shellcode spawns a /bin/sh shell.

The provided text describes a local buffer overflow vulnerability in Progress Database programs due to insufficient bounds checking in strcpy functions. This could allow arbitrary code execution with elevated privileges, potentially leading to root access.