CVE-2004-0074
xsok 1.02 - Local Privilege Escalation via Long LANG Environment Variable or -xsokdir Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0074. PoCs published by c0wboy, N2n-Hacker.
AI-analyzed exploit summary This exploit targets a buffer overflow in xsok 1.02 by overwriting the return address with a hardcoded stack address and executing shellcode to spawn a shell. The shellcode includes setregid(20,20) followed by execve(/bin/sh).
Description
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.
Exploits (2)
This exploit targets a buffer overflow in xsok 1.02 by overwriting the return address with a hardcoded stack address and executing shellcode to spawn a shell. The shellcode includes setregid(20,20) followed by execve(/bin/sh).
This exploit leverages a buffer overflow in xsok 1.02 via the LANG environment variable to execute arbitrary code with elevated privileges (setgid games). It automatically calculates the return address and includes shellcode to spawn a shell with the effective UID/GID of the vulnerable binary.