Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-1317. PoCs published by TESO Security.
AI-analyzed exploit summary This exploit targets a buffer overflow in the XFS font server (fs.auto) to achieve remote command execution with 'nobody' privileges. It leverages a symlink attack and GOT overwrite to redirect execution to shellcode on the stack.
Description
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
Exploits (1)
This exploit targets a buffer overflow in the XFS font server (fs.auto) to achieve remote command execution with 'nobody' privileges. It leverages a symlink attack and GOT overwrite to redirect execution to shellcode on the stack.