Exploitation Summary
EIP tracks 2 public exploits for CVE-2004-0524. PoCs published by Bytes, x314.
AI-analyzed exploit summary This exploit targets a local buffer overflow in Squirrelmail's chpasswd utility (CVE-2004-0524) to achieve privilege escalation via a bruteforce return address attack. It uses a setuid(0) shellcode to spawn a root shell.
Description
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.
Exploits (2)
This exploit targets a local buffer overflow in Squirrelmail's chpasswd utility (CVE-2004-0524) to achieve privilege escalation via a bruteforce return address attack. It uses a setuid(0) shellcode to spawn a root shell.
This exploit leverages a buffer overflow in SquirrelMail's chpasswd utility to execute arbitrary shellcode, granting local root access. The shellcode spawns a shell, and the exploit constructs a malicious environment to trigger the overflow.