Sam Hawker wmcdplay 1.0 beta1-2 - Local Buffer Overflow (2)

Author: Larry W. Cashdolla
type: local
platform: linux
port: 
date_added: 2000-03-13 
date_updated: 2012-07-16 
verified: 1 
codes: CVE-2000-0223;OSVDB-1253 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/1047/info

wmcdplay is cdplayer generally used with the WindowMaker X11 window-manager on unix systems. While wmcdplay is rarely installed at all by default, when it is installed it is typically set setuid root. wmcdplay is vulnerable to a buffer overflow attack due to lack of bounds checking on an argument it is passed. As a result, a local user can elevate their priviliges to root through overruning the stack and executing arbitrary code with the effective user-id of the process (root).

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19803.tar.gz