CVE-2003-0584
BRU < 17.0 - Local Format String Vulnerability via Command Line Argument
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0584. PoCs published by nic, DVDMAN.
AI-analyzed exploit summary This exploit leverages a format string vulnerability in BRU (Backup and Restore Utility) to achieve local privilege escalation by overwriting memory addresses with crafted input. The shellcode spawns a root shell when executed.
Description
Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument.
Exploits (2)
This exploit leverages a format string vulnerability in BRU (Backup and Restore Utility) to achieve local privilege escalation by overwriting memory addresses with crafted input. The shellcode spawns a root shell when executed.
This exploit leverages a stack-based buffer overflow in EST BRU Backup and Restore Utility to achieve local privilege escalation. It targets both Linux and FreeBSD systems by overwriting the return address with a crafted payload containing shellcode.