CVE-2008-0964
OpenSolaris and Solaris 8-10 - Remote Code Execution via Crafted SMB Packet
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0964. PoCs published by Andi.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the Solaris snoop utility (CVE-2008-0964) to achieve remote code execution. It crafts a malicious SMB packet with a payload that overwrites the return address to execute arbitrary commands via system().
Description
Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.
Exploits (1)
This exploit targets a buffer overflow vulnerability in the Solaris snoop utility (CVE-2008-0964) to achieve remote code execution. It crafts a malicious SMB packet with a payload that overwrites the return address to execute arbitrary commands via system().