CVE-2004-0524

This exploit targets a local buffer overflow in Squirrelmail's chpasswd utility (CVE-2004-0524) to achieve privilege escalation via a bruteforce return address attack. It uses a setuid(0) shellcode to spawn a root shell.

This exploit leverages a buffer overflow in SquirrelMail's chpasswd utility to execute arbitrary shellcode, granting local root access. The shellcode spawns a shell, and the exploit constructs a malicious environment to trigger the overflow.