CVE-2002-0991
HP CIFS/9000 Client <= A.01.06 - Local Buffer Overflow via Long Command Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-0991. PoCs published by watercloud, alt3kx.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the cifslogin utility (CVE-2002-0991) on HP-UX systems. It constructs a malicious buffer with NOP sleds and shellcode to achieve root shell execution via command-line argument overflow.
Description
Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters.
Exploits (2)
This exploit targets a buffer overflow vulnerability in the cifslogin utility (CVE-2002-0991) on HP-UX systems. It constructs a malicious buffer with NOP sleds and shellcode to achieve root shell execution via command-line argument overflow.
This repository contains a functional exploit for CVE-2002-0991, a buffer overflow vulnerability in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier. The exploit leverages improper bounds checking in command-line arguments to execute arbitrary shellcode, potentially leading to root compromise.