CVE-2008-6252
smcFanControl 2.1.2 - Local Privilege Escalation via Long -k Option
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6252. PoCs published by xwings.
AI-analyzed exploit summary The exploit demonstrates a buffer overflow vulnerability in smcFanControl 2.1.2 for OSX, where the `-k` option in the `smc` binary fails to handle large input buffers, leading to a stack-based overflow. The PoC uses a Ruby command to generate a 45-byte 'A' string followed by 'BBBBCCCC' to trigger the overflow, resulting in a crash with control over EIP.
Description
Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and gain privileges via a long -k option.
Exploits (1)
The exploit demonstrates a buffer overflow vulnerability in smcFanControl 2.1.2 for OSX, where the `-k` option in the `smc` binary fails to handle large input buffers, leading to a stack-based overflow. The PoC uses a Ruby command to generate a 45-byte 'A' string followed by 'BBBBCCCC' to trigger the overflow, resulting in a crash with control over EIP.