CVE-2003-0144
lprold - Local Buffer Overflow via Long Command Line Arguments
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0144. PoCs published by CMN, Niall Smart.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in OpenBSD's lprm command (CVE-2003-0144) to achieve local privilege escalation. It crafts a malicious input buffer with NOP sleds, shellcode, and return address manipulation to execute arbitrary code as root.
Description
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
Exploits (2)
This exploit targets a buffer overflow vulnerability in OpenBSD's lprm command (CVE-2003-0144) to achieve local privilege escalation. It crafts a malicious input buffer with NOP sleds, shellcode, and return address manipulation to execute arbitrary code as root.
This exploit targets a buffer overflow vulnerability in the lprm command in OpenBSD and FreeBSD-stable. It crafts a malicious string to overwrite the saved EIP and execute shellcode, granting root access.