CVE-2003-0947
wireless_tools - Buffer Overflow via Long OUT Environment Variable
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2003-0947. PoCs published by heka, NrAziz, axis.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in iwconfig (CVE-2003-0947) to achieve local privilege escalation. It overwrites the return address with a shellcode payload that spawns a root shell.
Description
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.
Exploits (4)
This exploit targets a buffer overflow vulnerability in iwconfig (CVE-2003-0947) to achieve local privilege escalation. It overwrites the return address with a shellcode payload that spawns a root shell.
This exploit leverages a buffer overflow in iwconfig when handling large strings as interface parameters. It overwrites the return address with a hardcoded stack address (0xbffffc3f) and executes shellcode to spawn a shell, achieving local privilege escalation.
This exploit targets a local privilege escalation vulnerability in iwconfig (CVE-2003-0947) by overflowing a buffer with a crafted environment variable and shellcode. The shellcode executes a shell, potentially granting elevated privileges.
This exploit targets a buffer overflow vulnerability in iwconfig version 26, leveraging a setuid binary to achieve local privilege escalation. It uses a 45-byte shellcode to spawn a shell and manipulates the environment variables to trigger the overflow.