CVE-2003-0609

This exploit leverages a stack-based buffer overflow in Solaris' ld.so.1 via a long LD_PRELOAD environment variable to achieve local privilege escalation. It uses a ret-into-ld.so technique to bypass non-executable stack protections and executes shellcode to spawn a root shell.

This exploit targets a buffer overflow in the Solaris runtime linker (ld.so.1) on SPARC architecture, leveraging the LD_PRELOAD environment variable to execute arbitrary shellcode. The shellcode performs privilege escalation by calling setuid(0) and setreuid(0) before spawning a shell.