CVE-2002-0740

This exploit targets a buffer overflow vulnerability in slrnpull (part of the slrn package) by supplying an overly long spool directory name via the -d flag. It uses shellcode to spawn a shell and manipulates the return address to achieve arbitrary code execution, gaining setgid news privileges on Red Hat 6.2.

This repository contains a functional exploit for CVE-2002-0740, a buffer overflow vulnerability in SLRNPull's spool directory command line parameter. The exploit leverages a crafted buffer to overwrite the return address and execute shellcode, granting setgid news privileges on Red Hat 6.2.