CVE-2003-1236
Tanne 0.6.17 - Remote Code Execution via Format String in Logger Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-1236. PoCs published by dong-h0un yoU.
AI-analyzed exploit summary This exploit targets a format string vulnerability in TANne 0.6.17, leveraging insecure syslog() calls to achieve remote code execution. It crafts a malicious payload to overwrite the GOT entry of syslog() and redirect execution to a shellcode that spawns a rootshell on port 36864.
Description
Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.
Exploits (1)
This exploit targets a format string vulnerability in TANne 0.6.17, leveraging insecure syslog() calls to achieve remote code execution. It crafts a malicious payload to overwrite the GOT entry of syslog() and redirect execution to a shellcode that spawns a rootshell on port 36864.