Exploitation Summary
EIP tracks 6 public exploits for CVE-2003-0358. PoCs published by tsao@efnet, [email protected], fengjixuchui.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in nethack (CVE-2003-0358) by passing an overly large string to corrupt memory and execute arbitrary shellcode. The shellcode is designed to spawn a shell, potentially allowing privilege escalation if nethack is setgid 'games'.
Description
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.
Exploits (6)
This exploit leverages a buffer overflow vulnerability in nethack (CVE-2003-0358) by passing an overly large string to corrupt memory and execute arbitrary shellcode. The shellcode is designed to spawn a shell, potentially allowing privilege escalation if nethack is setgid 'games'.
This exploit leverages a buffer overflow in Nethack 3.4.0 by passing an overly large string to corrupt memory and execute arbitrary shellcode. The PoC demonstrates privilege escalation to the 'games' group via a setgid binary.
This exploit leverages a buffer overflow in nethack (CVE-2003-0358) by passing an overly large string to corrupt memory and execute arbitrary shellcode. The shellcode spawns a shell, potentially allowing privilege escalation if nethack is setgid 'games'.
This repository contains functional exploit code for CVE-2003-0358, a buffer overflow vulnerability in Nethack 3.4.0 and earlier. The exploit leverages a long -s command line option to execute arbitrary shellcode, achieving local privilege escalation.
This repository contains functional exploit code for CVE-2003-0358, a buffer overflow vulnerability in Nethack 3.4.0 and earlier. The exploit leverages a long -s command line option to execute arbitrary shellcode, demonstrating local privilege escalation.
This repository contains functional exploit code for CVE-2003-0358, a buffer overflow vulnerability in Nethack 3.4.0 and earlier, and Falcon's Eye 1.9.3 and earlier. The exploit leverages a long -s command line option to execute arbitrary shellcode, achieving local privilege escalation.