Exploitation Summary
EIP tracks 2 public exploits for CVE-2002-0740. PoCs published by zillion, alt3kx.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in slrnpull (part of the slrn package) by supplying an overly long spool directory name via the -d flag. It uses shellcode to spawn a shell and manipulates the return address to achieve arbitrary code execution, gaining setgid news privileges on Red Hat 6.2.
Description
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
Exploits (2)
This exploit targets a buffer overflow vulnerability in slrnpull (part of the slrn package) by supplying an overly long spool directory name via the -d flag. It uses shellcode to spawn a shell and manipulates the return address to achieve arbitrary code execution, gaining setgid news privileges on Red Hat 6.2.
This repository contains a functional exploit for CVE-2002-0740, a buffer overflow vulnerability in SLRNPull's spool directory command line parameter. The exploit leverages a crafted buffer to overwrite the return address and execute shellcode, granting setgid news privileges on Red Hat 6.2.