Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3503. PoCs published by prdelka.
AI-analyzed exploit summary The exploit triggers a NULL pointer dereference in Solaris 'su' by exhausting memory limits, causing malloc() to fail and leading to a segmentation fault when strcpy() is called with a NULL pointer. This is achieved by setting a large environment variable and restricting the data segment size.
Description
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.
Exploits (1)
The exploit triggers a NULL pointer dereference in Solaris 'su' by exhausting memory limits, causing malloc() to fail and leading to a segmentation fault when strcpy() is called with a NULL pointer. This is achieved by setting a large environment variable and restricting the data segment size.