CVE-2005-0193

iSync mRouter - Buffer Overflow via Command Line Switches

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-0193. PoCs published by nemo.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the mRouter suid binary used by iSync on macOS <= 10.3.7. It leverages a stack-based overflow to execute shellcode, achieving local privilege escalation.

Description

Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code.

Exploits (1)

exploitdb WORKING POC VERIFIED

by nemo · clocalosx

https://www.exploit-db.com/exploits/766

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in the mRouter suid binary used by iSync on macOS <= 10.3.7. It leverages a stack-based overflow to execute shellcode, achieving local privilege escalation.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: mRouter (iSync component) on macOS <= 10.3.7

No auth needed

Prerequisites: Local access to the vulnerable system · Presence of the vulnerable mRouter binary

MITRE ATT&CK