3307 matches found
linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes
linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes. Shellcode exploit for linx86 platform / linux/x86 eject cd-rom follows "/dev/cdrom" symlink + exit - 40 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx...
linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes
Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes ===================================================================== / linux/x86 eject cd-rom follows...
linux/x86 eject/close cd-rom loop follows /dev/cdrom symlink 45 bytes
linux/x86 eject/close cd-rom loop follows /dev/cdrom symlink 45 bytes. Shellcode exploit for linx86 platform / linux/x86 eject & close cd-rom frenzy loop follows "/dev/cdrom" symlink - 45 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51"...
linux/x86 24/7 open cd-rom loop follows /dev/cdrom symlink 39 bytes
linux/x86 24/7 open cd-rom loop follows /dev/cdrom symlink 39 bytes. Shellcode exploit for linx86 platform / linux/x86 24/7 open cd-rom loop follows "/dev/cdrom" symlink - 39 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx...
linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes
No description provided by source. / linux/x86 eject cd-rom follows "/dev/cdrom" symlink + exit - 40 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch "\x68\x64\x72\x6f\x6d" // push...
linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes
Exploit for linux/x86 platform in category shellcode ======================================================================= linux/x86 eject/close cd-rom loop follows /dev/cdrom symlink 45 bytes ======================================================================= / linux/x86 eject & close cd-r...
linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes
No description provided by source. / linux/x86 24/7 open cd-rom loop follows "/dev/cdrom" symlink - 39 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch "\x68\x64\x72\x6f\x6d" // pus...
linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes
Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 24/7 open cd-rom loop follows /dev/cdrom symlink 39 bytes ===================================================================== / linux/x86 24/7 open cd-rom loop...
linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes
No description provided by source. / linux/x86 eject & close cd-rom frenzy loop follows "/dev/cdrom" symlink - 45 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch...
Buffer overflow
Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...
CVE-2006-0117: Undefined Security Weakness
Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...
SunSolve CD CGI user input validation
Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: OpenVAS did not try to perform the attack. OpenVAS Vulnerability Test $Id: sscdinput.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: SunSolve CD CGI user input validatio...
SunSolve CD CGI user input validation
Sunsolve CD CGI scripts does not validate user input. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2005-2967
Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD...
USN-196-1: Xine library vulnerability
Ulf Harnhammar discovered a format string vulnerability in the CDDB module's cache file handling in the Xine library, which is used by packages such as xine-ui, totem-xine, and gxine. By tricking an user into playing a particular audio CD which has a specially-crafted CDDB entry, a remote attacke...
Xine-Lib 1.1 - 'Media Player Library' Remote Format String
!/usr/bin/perl -- When playing an Audio CD, using xine-lib based media application, the library contacts a CDDB server to retrieve metadata like the title and artist's name. During processing of this data, a response from the server, which is located in memory on the stack, is passed to the fprin...
xine-lib <= 1.1 (media player library) Remote Format String Exploit
Exploit for linux platform in category remote exploits =================================================================== xine-lib = 1.1 media player library Remote Format String Exploit =================================================================== !/usr/bin/perl -- When playing an Audio C...
libxine -- format string vulnerability
Gentoo Linux Security Advisory reports: Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. An attacker could submit malicious information about an audio CD to a public CDDB server or impersonate a public CDDB server. When the victim plays this CD...
Important: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 6
Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the sixth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...
