CVE-2004-0074

This exploit targets a buffer overflow in xsok 1.02 by overwriting the return address with a hardcoded stack address and executing shellcode to spawn a shell. The shellcode includes setregid(20,20) followed by execve(/bin/sh).

This exploit leverages a buffer overflow in xsok 1.02 via the LANG environment variable to execute arbitrary code with elevated privileges (setgid games). It automatically calculates the return address and includes shellcode to spawn a shell with the effective UID/GID of the vulnerable binary.