CVE-1999-1008

Description

xsoldier program allows local users to gain root access via a long argument.

Affected products

• FreeBSD / FreeBSD3.3 – 3.3
• mandrakesoft / mandrake_linux7.0 – 7.0

Exploits & proofs of concept

• exploit-dbxsoldier 0.96 (RedHat 6.2) - Local Buffer Overflowby zorgon
• exploit-dbxsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Local Buffer Overflow (2)by Larry W. Cashdollar
• exploit-dbxsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Local Buffer Overflow (1)by Brock Tellier

References

• MAILING_LISThttp://marc.info/?l=freebsd-security&m=94531826621620&w=2
• MISChttp://www.securityfocus.com/bid/871