7.2
CVSSv2

CVE-2005-3533

Published: 11/12/2005 Updated: 08/03/2011
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 730
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in OSH prior to 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.

Vulnerable Product Search on Vulmon Subscribe to Product

osh osh

Exploits

#!/usr/bin/perl # Tested and working uid=50(str0ke) gid=100(users) euid=0(root) groups=100(users) # /str0ke ####################################################################### # # OSH 17 Exploit # # EDUCATIONAL purposes only :-) # # by Charles Stevenson (core) <core@bokeoacom> # # Description: # The Operator Shell (Osh) is a setuid ...
# You must be group(operator) for permissions /str0ke #!/usr/bin/perl ####################################################################### # # OSH 17 Exploit #2 (Gonna bang away at this until it's removed ;-) # # EDUCATIONAL purposes only :-) # # by Charles Stevenson (core) <core@bokeoacom> # # Description: # The Operator Shell (Os ...