CVE-2003-0826
GNU lsh - Remote Code Execution via Heap-Based Buffer Overflow in lshd
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0826. PoCs published by m00 security, Carl Livitt.
AI-analyzed exploit summary This exploit targets a remote buffer overflow vulnerability in lshd versions 1.3-1.5, allowing pre-authentication remote code execution. It binds a shell on port 61200 and includes multiple targets for various Linux distributions.
Description
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.
Exploits (2)
This exploit targets a remote buffer overflow vulnerability in lshd versions 1.3-1.5, allowing pre-authentication remote code execution. It binds a shell on port 61200 and includes multiple targets for various Linux distributions.
This exploit targets a remote buffer overflow in lsh 1.4.x, bypassing non-exec stack protection by placing shellcode on the heap. It spawns a bindshell on port 12345 and requires the exploit to be the first connection to the lshd daemon after startup.