CVE-2002-2087
Borland InterBase 6.0 - Local Buffer Overflow via INTERBASE Environment Variable
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2002-2087. PoCs published by bob.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Firebird 1.0.0's setuid root programs (gds_inet_server, gds_lock_mgr, gds_drop) on FreeBSD 4.7. It leverages a crafted environment variable to overwrite stack memory and execute arbitrary shellcode for privilege escalation.
Description
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
Exploits (4)
This exploit targets a buffer overflow vulnerability in Firebird 1.0.0's setuid root programs (gds_inet_server, gds_lock_mgr, gds_drop) on FreeBSD 4.7. It leverages a crafted environment variable to overwrite stack memory and execute arbitrary shellcode for privilege escalation.
This is a functional local exploit for CVE-2002-2087, targeting a buffer overflow in Interbase/Firebird's gds_drop, gds_lock_mgr, and gds_inet_server binaries. It leverages environment variable manipulation to overwrite stack memory and execute arbitrary shellcode.
This Perl script exploits a buffer overflow in the gds_drop program of Interbase 6.0 Linux beta by manipulating environment variables to execute arbitrary code (spawning a shell). The exploit uses a NOP sled and shellcode to achieve local privilege escalation.
This is a functional local exploit for Firebird 1.0.2 on FreeBSD 4.7, leveraging a buffer overflow in the INTERBASE environment variable to execute arbitrary shellcode. It targets three different Firebird binaries (gds_inet_server, gds_lock_mgr, gds_drop) with distinct payloads for each.