CVE-2002-1492

This exploit targets a buffer overflow vulnerability in Cisco VPN 5000 UNIX clients (Linux/Solaris) via the setuid root binaries 'close_tunnel' and 'open_tunnel'. It leverages a stack-based overflow to execute shellcode, granting root privileges.

This exploit leverages a command-line buffer overflow in the setuid root binary 'close_tunnel' of Cisco VPN 5000 UNIX clients (Linux/Solaris). It overflows the buffer via the '-d' option to overwrite the return address and execute arbitrary shellcode, granting root privileges.