Description
Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- HP CIFS/9000 Server A.01.05/A.01.06 - Local Buffer Overflow EDB-21577 · local · Nov 6, 2002 · verified
GitHub 1 repository
-
alt3kx/CVE-2002-0991 ★ 0 · May 11, 2018
Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- HPSBUX0207-200 vendor-advisory
- hp-cifs-login-bo(9431) vdb-entry
- 20020624 Sharity Cifslogin Buffer Overflow (arguments) mailing-list
- 5088 vdb-entry