Exploitation Summary
EIP tracks 4 public exploits for CVE-2006-4655. PoCs published by Marco Ivaldi, RISE Security.
AI-analyzed exploit summary This exploit targets a buffer overflow in the XKEYBOARD extension's Strcmp function (CVE-2006-4655) on Solaris/SPARC systems. It leverages a long _XKB_CHARSET environment variable to achieve local privilege escalation by overwriting the stack and executing shellcode.
Description
Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.
Exploits (4)
This exploit targets a buffer overflow in the XKEYBOARD extension's Strcmp function (CVE-2006-4655) on Solaris/SPARC systems. It leverages a long _XKB_CHARSET environment variable to achieve local privilege escalation by overwriting the stack and executing shellcode.
This exploit targets a buffer overflow vulnerability in the XKEYBOARD extension of X11R6 on Sun Solaris 8/9/10 SPARC systems. It leverages either sprintf or strcpy to achieve remote code execution by manipulating environment variables and injecting shellcode.
This exploit targets a buffer overflow vulnerability in the X11R6 XKEYBOARD extension on Sun Solaris 8/9/10 x86 systems. It leverages an environment variable overflow to execute arbitrary shellcode, granting remote code execution via the `dtaction` binary.
This exploit targets a buffer overflow vulnerability in the XKEYBOARD extension of X11R6 on SCO UnixWare 7.1.3. It leverages an environment variable overflow to execute arbitrary shellcode, resulting in remote code execution.