• info
• discussion
• exploit
• solution
• references

Mike Neuman OSH Environment Variable Buffer Overflow Vulnerability

An exploit is not required.

The following example exploit by Charles Stevenson (core) <core@bokeoa.com> is available:

• /data/vulnerabilities/exploits/oshexploit2.pl
• /data/vulnerabilities/exploits/oshexploit.pl
• /data/vulnerabilities/exploits/x_osh3.sh