CVE-2003-0649

xpcd < 2.08 - Local Buffer Overflow via HOME Environment Variable

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0649. PoCs published by r-code.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in xpcd 2.0.8 by manipulating environment variables to execute arbitrary shellcode. The PoC uses a stack-based overflow to overwrite the return address and gain code execution.

Description

Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r-code · clocallinux

https://www.exploit-db.com/exploits/22996

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in xpcd 2.0.8 by manipulating environment variables to execute arbitrary shellcode. The PoC uses a stack-based overflow to overwrite the return address and gain code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: xpcd 2.0.8

No auth needed

Prerequisites: xpcd binary must be installed · xpcd must be setuid or executed in a privileged context

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Patch, Vendor Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2003/dsa-368

Vendor Advisory vendor-advisory x_refsource_mandrake

http://www.mandriva.com/security/advisories?name=MDKSA-2004:053

Scores

EPSS 0.0104

EPSS Percentile 59.7%

Details

Status published

Products (1)

xpcd/xpcd < 2.08

Published Aug 27, 2003

Tracked Since Feb 18, 2026