CVE-2002-1506
Linuxconf - Buffer Overflow via LINUXCONF_LANG Environment Variable
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-1506. PoCs published by syscalls, David Endler, RaiSe.
AI-analyzed exploit summary The provided text describes a buffer overflow vulnerability in Linuxconf due to insufficient bounds checking of the LINUXCONF_LANG environment variable. An attacker can exploit this by setting an overly large string in the environment variable to trigger the overflow.
Description
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.
Exploits (3)
The provided text describes a buffer overflow vulnerability in Linuxconf due to insufficient bounds checking of the LINUXCONF_LANG environment variable. An attacker can exploit this by setting an overly large string in the environment variable to trigger the overflow.
This exploit leverages a buffer overflow in Linuxconf via the LINUXCONF_LANG environment variable to execute arbitrary shellcode. It is a classic stack-smashing attack, tested on Redhat 7.0 with linuxconf 1.25r3.
This exploit leverages a buffer overflow in Linuxconf via the LINUXCONF_LANG environment variable to achieve local privilege escalation. It uses ptrace to locate the shellcode address dynamically and executes a reverse shell payload.