XSOK XSOKDir Option Local Buffer Overrun Vulnerability
BID:9352
Info
XSOK XSOKDir Option Local Buffer Overrun Vulnerability
| Bugtraq ID: | 9352 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-0074 CVE-2001-0770 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 04 2004 12:00AM |
| Updated: | Jul 12 2009 12:56AM |
| Credit: | Discovery credited to c0wboy@0x333. |
| Vulnerable: |
xsok xsok 1.0 2 |
| Not Vulnerable: | |
Discussion
XSOK XSOKDir Option Local Buffer Overrun Vulnerability
xsok is prone to a locally exploitable buffer overrun vulnerability due to insufficient bounds checking of data supplied xsokdir option. This could be exploited to execute arbitrary code with elevated privileges. The program is typically installed setgid games.
xsok is prone to a locally exploitable buffer overrun vulnerability due to insufficient bounds checking of data supplied xsokdir option. This could be exploited to execute arbitrary code with elevated privileges. The program is typically installed setgid games.
Exploit / POC
XSOK XSOKDir Option Local Buffer Overrun Vulnerability
The following exploit was contributed by c0wboy.
The following exploit was contributed by c0wboy.