medium4.6Public exploit code
CVE-2004-0074
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XSOK 1.0 2 - 'LANG Environment' Local Buffer Overrun2003-12-30 · local · linux · Verified
- XSOK 1.02 - '-xsokdir' Local Buffer Overflow Game2004-01-02 · local · linux · Verified
Impact
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Bischoff | Xsok | Version 1.02 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107307407027259&w=2
- http://marc.info/?l=bugtraq&m=107332542918529&w=2
- http://www.securityfocus.com/bid/9341
- http://www.securityfocus.com/bid/9352
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14906
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14910
- http://marc.info/?l=bugtraq&m=107307407027259&w=2
- http://marc.info/?l=bugtraq&m=107332542918529&w=2
- http://www.securityfocus.com/bid/9341
- http://www.securityfocus.com/bid/9352
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14906
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14910