CVE-2008-4556
Sun Solaris 8 and 9 - Stack-Based Buffer Overflow in adm_build_path Function
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-4556.
PoCs published by Metasploit, kingcope, Adriano Lima, including Metasploit module exploits/solaris/sunrpc/sadmind_adm_build_path.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the `adm_build_path()` function of the Solaris `sadmind` daemon (CVE-2008-4556). It uses a brute-force approach to bypass ASLR by targeting memory addresses in the `sadmind` process, delivering a payload to achieve remote code execution.
Description
Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.
Exploits (4)
This exploit targets a buffer overflow vulnerability in the `adm_build_path()` function of the Solaris `sadmind` daemon (CVE-2008-4556). It uses a brute-force approach to bypass ASLR by targeting memory addresses in the `sadmind` process, delivering a payload to achieve remote code execution.
This exploit targets a remote buffer overflow vulnerability in SunOS 5.9's sadmind service, allowing unauthenticated remote code execution. It uses a crafted RPC request to trigger the overflow and execute a bind shell on port 5555.
This exploit targets a buffer overflow vulnerability in the `adm_build_path()` function of the Solaris `sadmind` daemon (CVE-2008-4556). It uses a brute-force approach to bypass ASLR by targeting memory addresses in the `sadmind` process, delivering a payload via a maliciously crafted SunRPC request.
This Metasploit module exploits a buffer overflow in the `adm_build_path()` function of the Sun Solstice AdminSuite `sadmind` daemon (CVE-2008-4556). It targets Sun Solaris 9 x86 systems via a crafted SunRPC request to achieve remote code execution.