CVE-2016-20042

HIGH

TRN 3.6-23 Stack Buffer Overflow Local Code Execution

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-20042. PoCs published by Juan Sacco.

AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in TRN 3.6-23, leveraging a NOP sled and shellcode to achieve arbitrary code execution. The EIP is overwritten with a hardcoded address, and the payload spawns a shell.

Description

TRN 3.6-23 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the application. Attackers can craft a malicious command-line argument with 156 bytes of padding followed by a return address to overwrite the instruction pointer and execute shellcode with user privileges.

Exploits (1)

exploitdb WORKING POC
by Juan Sacco · pythonlocallinux
https://www.exploit-db.com/exploits/39764

This exploit demonstrates a stack-based buffer overflow in TRN 3.6-23, leveraging a NOP sled and shellcode to achieve arbitrary code execution. The EIP is overwritten with a hardcoded address, and the payload spawns a shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TRN (Threaded USENET news reader) 3.6-23
No auth needed
Prerequisites: Local access to the target system · TRN 3.6-23 installed
devstral-2 · analyzed Apr 08, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit exploit
ExploitDB-39764
https://www.exploit-db.com/exploits/39764
Product product
Official Product Homepage
https://sourceforge.net/projects/trn/
Third Party Advisory third-party-advisory
VulnCheck Advisory: TRN 3.6-23 Stack Buffer Overflow Local Code Execution
https://www.vulncheck.com/advisories/trn-23-stack-buffer-overflow-local-code-execution

Scores

CVSS v3 8.4
EPSS 0.0014
EPSS Percentile 4.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (1)
trn/Threaded USENET News Reader 3.6-23
Published Mar 28, 2026
Tracked Since Mar 29, 2026