Real Exploit: CVE-2001-0709

• System V Derived /bin/login Many Arguments Buffer Overflow

• Provide a large number of environment variable arguments to /bin/login via the login: prompt

• Exploitation can be done entirely through unauthenticated user interaction with the login prompt

• Provides a shell via the same connection