CVE-2004-0544
IBM AIX 5.1-5.2 - Local Privilege Escalation via LVM putlvcb/getlvcb Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0544. PoCs published by mattox, watercloud.
AI-analyzed exploit summary This exploit leverages a buffer overflow in the AIX `getlvcb` utility to achieve local privilege escalation to root. It constructs a malicious buffer with NOP sleds and shellcode to overwrite the return address and execute arbitrary code.
Description
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
Exploits (2)
This exploit leverages a buffer overflow in the AIX `getlvcb` utility to achieve local privilege escalation to root. It constructs a malicious buffer with NOP sleds and shellcode to overwrite the return address and execute arbitrary code.
This exploit targets a buffer overflow vulnerability in the `getlvcb` utility on AIX 4.3.3, allowing an attacker with `gid=0` to escalate privileges to `uid=0` (root). The exploit uses a crafted environment variable and shellcode to achieve arbitrary code execution.