Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-0176. PoCs published by Qnix, xwings.
AI-analyzed exploit summary This exploit leverages a local buffer overflow in Xmame 0.102 via the '-lang' argument to execute arbitrary shellcode, resulting in a root shell. The exploit calculates the stack pointer and overwrites the return address with a NOP sled followed by shellcode.
Description
Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -rec argument on many operating systems, and via a long (5) -jdev argument on Ubuntu Linux.
Exploits (2)
This exploit leverages a local buffer overflow in Xmame 0.102 via the '-lang' argument to execute arbitrary shellcode, resulting in a root shell. The exploit calculates the stack pointer and overwrites the return address with a NOP sled followed by shellcode.
This exploit targets a buffer overflow vulnerability in xmame 0.102 via the '-lang' command-line argument. It uses a 49-byte shellcode to spawn a shell by leveraging a stack-based overflow with a NOP sled and return address overwrite.