Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0246. PoCs published by jGgM.
AI-analyzed exploit summary This exploit leverages a format string vulnerability in UnixWare's locale subsystem (CVE-2002-0246) to achieve local privilege escalation. It uses maliciously crafted message catalogs via the LC_MESSAGES environment variable to execute arbitrary code with elevated privileges.
Description
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.
Exploits (1)
This exploit leverages a format string vulnerability in UnixWare's locale subsystem (CVE-2002-0246) to achieve local privilege escalation. It uses maliciously crafted message catalogs via the LC_MESSAGES environment variable to execute arbitrary code with elevated privileges.