CVE-2002-0158

Solaris 2.6-8 - Buffer Overflow via Xsun -co Argument

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0158. PoCs published by gloomy.

AI-analyzed exploit summary This exploit targets a heap overflow in Xsun on Solaris via the -co flag, allowing local privilege escalation. It uses a crafted tree structure and shellcode to overwrite the ti_jmp_table and execute arbitrary code.

Description

Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.

Exploits (1)

exploitdb WORKING POC VERIFIED

by gloomy · clocalsolaris

https://www.exploit-db.com/exploits/21360

View Code ZIP pw:eip

This exploit targets a heap overflow in Xsun on Solaris via the -co flag, allowing local privilege escalation. It uses a crafted tree structure and shellcode to overwrite the ti_jmp_table and execute arbitrary code.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Complex

Reliability

Reliable

Target: Xsun (Solaris X server)

No auth needed

Prerequisites: Local access to a vulnerable Solaris system with Xsun installed

MITRE ATT&CK