Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-0902. PoCs published by kingcope.
AI-analyzed exploit summary This exploit leverages environment variable manipulation (PATH) in the SunScreen Firewall's Java service to execute arbitrary code as root. It uploads a malicious 'cat' binary to a writable directory, which then spawns a root shell on port 1524/tcp via inetd.
Description
Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LD_LIBRARY_PATH environment variable.
Exploits (1)
This exploit leverages environment variable manipulation (PATH) in the SunScreen Firewall's Java service to execute arbitrary code as root. It uploads a malicious 'cat' binary to a writable directory, which then spawns a root shell on port 1524/tcp via inetd.