Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-0360. PoCs published by Marco Ivaldi.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in Solaris 8/9's passwd command (CVE-2004-0360) using a ret-into-ld.so technique to bypass non-executable stack protections. It crafts a malicious environment variable and buffer to overwrite the return address, executing shellcode to gain root privileges.
Description
Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors.
Exploits (1)
This exploit leverages a local privilege escalation vulnerability in Solaris 8/9's passwd command (CVE-2004-0360) using a ret-into-ld.so technique to bypass non-executable stack protections. It crafts a malicious environment variable and buffer to overwrite the return address, executing shellcode to gain root privileges.