Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-3098. PoCs published by kingcope.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in Qpopper's poppassd by manipulating the LD_PRELOAD environment variable to execute arbitrary code as root. It compiles a shared library to hijack execution flow and spawns a root shell.
Description
poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace file) command line argument.
Exploits (2)
This exploit leverages a local privilege escalation vulnerability in Qpopper's poppassd by manipulating the LD_PRELOAD environment variable to execute arbitrary code as root. It compiles a shared library to hijack execution flow and spawns a root shell.
This exploit leverages a vulnerability in FreeBSD's Qpopper poppassd by manipulating the libmap.conf file to load a malicious shared library, resulting in local privilege escalation to root. The exploit creates a custom shared library that executes a shell with elevated privileges.