CVE-2004-0510

SCO OpenServer 5.0.6-5.0.7 - Buffer Overflow via execmail

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-0510. PoCs published by Ramon de C Valle.

AI-analyzed exploit summary This exploit targets a buffer overflow in MMDF deliver on SCO OpenServer 5.0.7 x86. It constructs a malicious buffer with NOP sleds and shellcode to spawn a root shell via execve('/bin/ksh').

Description

Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Ramon de C Valle · clocalsco

https://www.exploit-db.com/exploits/602

View Code ZIP pw:eip

This exploit targets a buffer overflow in MMDF deliver on SCO OpenServer 5.0.7 x86. It constructs a malicious buffer with NOP sleds and shellcode to spawn a root shell via execve('/bin/ksh').

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: MMDF deliver on SCO OpenServer 5.0.7 x86

No auth needed

Prerequisites: Local access to the target system · MMDF deliver binary must be present and vulnerable

MITRE ATT&CK