CVE-2005-1396

This exploit targets a setuid vulnerability in the ARPUS/ce utility (CVE-2005-1396) by overflowing the XAPPLRESLANGPATH environment variable with shellcode to achieve local privilege escalation. The shellcode spawns a root shell by leveraging a buffer overflow and return address overwrite.

This exploit leverages a vulnerability in the ARPUS/ce program (CVE-2005-1396) by manipulating the DISPLAY environment variable to prevent privilege dropping, then overwriting /etc/ld.so.preload with a malicious shared library to escalate privileges.