EIP-2026-102148

This exploit targets a buffer overflow vulnerability in HP-UX pppd (11.0) by overflowing a buffer with NOP sleds and HPPA shellcode to execute '/bin/sh'. It calculates the target address by adjusting the stack pointer and passes the malicious buffer to pppd via execl.