CVE-2003-0089
HP-UX B.11.00 and B.11.11 - Buffer Overflow via LANG Environment Variable
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0089. PoCs published by watercloud.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in HP-UX Software Distributor utilities (swinstall/swverify) to achieve local privilege escalation. It uses a crafted environment variable (LANG) to overflow the buffer and execute shellcode, granting a root shell.
Description
Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.
Exploits (1)
This exploit targets a buffer overflow vulnerability in HP-UX Software Distributor utilities (swinstall/swverify) to achieve local privilege escalation. It uses a crafted environment variable (LANG) to overflow the buffer and execute shellcode, granting a root shell.