Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-1396. PoCs published by Kevin Finisterre.
AI-analyzed exploit summary This exploit targets a setuid vulnerability in the ARPUS/ce utility (CVE-2005-1396) by overflowing the XAPPLRESLANGPATH environment variable with shellcode to achieve local privilege escalation. The shellcode spawns a root shell by leveraging a buffer overflow and return address overwrite.
Description
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file.
Exploits (2)
This exploit targets a setuid vulnerability in the ARPUS/ce utility (CVE-2005-1396) by overflowing the XAPPLRESLANGPATH environment variable with shellcode to achieve local privilege escalation. The shellcode spawns a root shell by leveraging a buffer overflow and return address overwrite.
This exploit leverages a vulnerability in the ARPUS/ce program (CVE-2005-1396) by manipulating the DISPLAY environment variable to prevent privilege dropping, then overwriting /etc/ld.so.preload with a malicious shared library to escalate privileges.