CVE-2003-0102
file - Buffer Overflow in readelf.c tryelf() via ELF Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0102. PoCs published by lem0nxx, lem0n.
AI-analyzed exploit summary This exploit leverages a stack overflow in the `file` program (CVE-2003-0102) to execute arbitrary shellcode. It crafts a malicious ELF file that, when processed by `file`, triggers the overflow and executes a payload that copies `/bin/sh` to `/tmp/.sh` with SUID permissions.
Description
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
Exploits (2)
This exploit leverages a stack overflow in the `file` program (CVE-2003-0102) to execute arbitrary shellcode. It crafts a malicious ELF file that, when processed by `file`, triggers the overflow and executes a payload that copies `/bin/sh` to `/tmp/.sh` with SUID permissions.
This exploit leverages a stack overflow in the `file` utility (versions <= 3.39) by manipulating the ELF header's `e_shentsize` field to trigger a buffer overflow, allowing arbitrary code execution. The shellcode is placed in the file's initial bytes, exploiting the `HOWMANY` read operation to ensure reliable execution.