Exploitation Summary
EIP tracks 3 public exploits for CVE-2001-1442. PoCs published by Enrique A., alt3kx.
AI-analyzed exploit summary This exploit targets a buffer overflow in the innfeed utility's command-line parser by passing an overly long -c option. It iterates through buffer sizes to trigger the overflow, potentially allowing arbitrary code execution with the 'news' user privileges.
Description
Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.
Exploits (3)
This exploit targets a buffer overflow in the innfeed utility's command-line parser by passing an overly long -c option. It iterates through buffer sizes to trigger the overflow, potentially allowing arbitrary code execution with the 'news' user privileges.
This exploit targets a buffer overflow in the innfeed utility (part of ISC InterNetNews) via the -c command-line option. It includes shellcode for privilege escalation to root (setuid(0)) and is designed for x86 Linux systems, with specific paths for RedHat and Slackware.
This repository contains a functional exploit for CVE-2001-1442, a buffer overflow vulnerability in ISC INN 2.x's startinnfeed utility. The exploit includes shellcode for privilege escalation and a brute-force script to determine the correct offset.