CVE-2003-0090

This exploit leverages a format string vulnerability in HP-UX 11i's `/usr/bin/ct` command to achieve local privilege escalation by manipulating environment variables and crafting a malicious `.cat` file. It uses a shellcode payload to spawn a root shell.

This exploit leverages a format string vulnerability in HP-UX's setuid root programs (e.g., /usr/sbin/ping) via the NLSPATH environment variable to achieve local privilege escalation. It crafts a malicious message catalog file to overwrite the return address of catopen(3C) and execute shellcode.

This exploit leverages a privilege escalation vulnerability in HP-UX by manipulating the NLSPATH environment variable to execute arbitrary code via a crafted message catalog file. It uses a format string attack to overwrite the return address of the `catopen` function, leading to root shell execution.