Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0449. PoCs published by kf.
AI-analyzed exploit summary This exploit leverages Progress database's improper handling of shared libraries via the PATH environment variable. By crafting a malicious shared object with an _init function, an attacker can escalate privileges to root.
Description
Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir command line parameter, as demonstrated using librocket_r.so in _dbagent.
Exploits (1)
This exploit leverages Progress database's improper handling of shared libraries via the PATH environment variable. By crafting a malicious shared object with an _init function, an attacker can escalate privileges to root.