CVE-2003-0955
OpenBSD 3.3-3.4 - Denial of Service and Possible Remote Code Execution via Invalid Program Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0955. PoCs published by Sinan Eren, Scott Bartram.
AI-analyzed exploit summary This exploit targets a kernel stack overflow in OpenBSD's IBCS2 COFF binary compatibility layer (CVE-2003-0955). It crafts a malicious COFF file with an oversized .shlib section to trigger the overflow and execute shellcode for privilege escalation.
Description
OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.
Exploits (2)
This exploit targets a kernel stack overflow in OpenBSD's IBCS2 COFF binary compatibility layer (CVE-2003-0955). It crafts a malicious COFF file with an oversized .shlib section to trigger the overflow and execute shellcode for privilege escalation.
The provided code is a header file for IBCS2 executable formats (COFF and XENIX) and lacks exploit logic. It appears to be a truncated or incomplete snippet, missing the main exploit implementation.