CVE-2001-1582
Solaris 8 - Buffer Overflow via LDAP_OPTIONS Environment Variable
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-1582. PoCs published by Fyodor, noir.
AI-analyzed exploit summary This exploit targets a buffer overflow in the 'libsldap' library on Solaris 8 via the 'LDAP_OPTIONS' environment variable. It leverages a setuid/setgid binary (e.g., /bin/passwd) to execute shellcode and escalate privileges.
Description
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
Exploits (2)
This exploit targets a buffer overflow in the 'libsldap' library on Solaris 8 via the 'LDAP_OPTIONS' environment variable. It leverages a setuid/setgid binary (e.g., /bin/passwd) to execute shellcode and escalate privileges.
This exploit targets a buffer overflow in the 'libsldap' library on Solaris 8 via the 'LDAP_OPTIONS' environment variable. It leverages setuid/setgid binaries linked to the library to achieve local privilege escalation by executing shellcode.