EIP-2026-102844

PRE-CVE

GemStone/S 6.3.1 - 'stoned' Local Buffer Overflow

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102844. PoCs published by Jeremy Brown.

AI-analyzed exploit summary This exploit targets a local buffer overflow in GemStone/S 6.3.1's 'stoned' binary via the '-e' or '-l' flags, brute-forcing ASLR to execute arbitrary shellcode for privilege escalation. It leverages a lack of modern protections (e.g., GCC 4.x) and a SUID binary to gain root access.

Description

GemStone/S 6.3.1 - 'stoned' Local Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED
by Jeremy Brown · clocallinux
https://www.exploit-db.com/exploits/9608

This exploit targets a local buffer overflow in GemStone/S 6.3.1's 'stoned' binary via the '-e' or '-l' flags, brute-forcing ASLR to execute arbitrary shellcode for privilege escalation. It leverages a lack of modern protections (e.g., GCC 4.x) and a SUID binary to gain root access.

Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: GemStone/S 6.3.1
No auth needed
Prerequisites: Local access to the system · Presence of vulnerable GemStone/S 6.3.1 installation · SUID binary '/opt/gemstone/sys/stoned'
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026