VMware Workstation and Player: Multiple vulnerabilities

Background VMware Workstation is a virtual machine for developers and system administrators. VMware Player is a freeware virtualization software that can run guests produced by other VMware products. Description Multiple vulnerabilities have been discovered in several VMware products. Neel Mehta...

Ubuntu 5.04 / 5.10 : binutils vulnerability (USN-336-1)

A buffer overflow was discovered in gas the GNU assembler. By tricking an user or automated system like a compile farm into assembling a specially crafted source file with gcc or gas, this could be exploited to execute arbitrary code with the user's privileges. Note that Tenable Network Security...

smbftpd 0.96 - SMBDirList-function Remote Format String

smbftpd 0.96 - SMBDirList-function Remote Format String / smbftpd 0.96 Proof of concept tested with smbftpd 0.96 compiled with gcc 3.3.6 1. write jumpcode to BSS mov dx, 0x1234 pop eax cmp ax, dx jne $-4 jmp esp 2. overwrite a GOT entry with the addr to BSS & send shellcode jerry: ./bleh -h...

Important: mysql security update

4.1.20-2.RHEL4.1.0.1 - Fix CVE-2007-3780: remote DOS via bad password length byte Resolves: 257621 - Workaround for new gcc bug on ia64: it locks up while compiling sqltable.cc...

BitchX 1.1-final - 'EXEC' Remote Command Execution

/ Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions: 1.1-final and others? Synopsis: BitchX suffers from a unchecked bounds in a hash table in hook.c where one can inject data structures allowing for the remote execution of commands! Usage: Execute "gcc -o pbxs pbxs.c; ./pbxs...

BitchX 1.1-final (EXEC) Remote Command Execution Exploit

Exploit for linux platform in category remote exploits ======================================================== BitchX 1.1-final EXEC Remote Command Execution Exploit ======================================================== / Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions:...

CentOS 3 : gcc (CESA-2007:0473)

Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support...

RHEL 3 : gcc (RHSA-2007:0473)

Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support...

Moderate: Red Hat Security Advisory: gcc security and bug fix update

Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support...

unix webshell permission to enhance the method-vulnerability warning-the black bar safety net

Most of the tips from my house nerd heaven of the eong greatly With wget the bindshell is downloaded to the/tmp/directory Or then/etc/inetd. conf can be written directly without opening an interactive shell Then use gcc to compile num=5 4 6 6 6 5 4&board=rebarz99&command=download&filename=rb9...

Moderate: gcc security and bug fix update

3.4.6-8.0.1 - add gcc34-pr23591-tls-model-fix.patch - this patch fixes a bug with exception handlers and threads 3.4.6-8 - add gnu.java.util.ZoneInfo class, use tzdata files for libgcj timezone stuff instead of builtin simple and outdated rules 227884 - add missing @GCC4.0.0 and @GCC4.2.0 libgcc...

gimp2214-overflow.txt

/ :: Kristian Hermansen :: Date: 20070509 Description: Gimp 2.2.14 RAS vuln, thanks to Marsu. This one is universal download and exec using call esp in libgimpcolor-2.0-0.dll. Vulnerable: Gimp 2.2.14 Tested: Gimp 2.2.14 on Windows Vista, XP, 2000 Compile: gcc -o netsniper-gimpu netsniper-gimpu.c...

Gimp 2.2.14 .RAS File Download/Execute Buffer Overflow Exploit (win32)

Exploit for unknown platform in category local exploits ====================================================================== Gimp 2.2.14 .RAS File Download/Execute Buffer Overflow Exploit win32 ====================================================================== / :: Kristian Hermansen :: Dat...

3proxy 0.5.3g proxy.c logurl() Remote Overflow Exploit (exec-shield)

No description provided by source. / Fedora Core 5,6 exec-shield based 3proxy HTTP Proxy 3proxy-0.5.3g.tgz remote overflow root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

RHEL 4 : gcc (RHSA-2007:0220)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0220 advisory. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support libraries. Jrgen Weigert discovered a...

Moderate: Red Hat Security Advisory: gcc security and bug fix update

Updated gcc packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support...

3proxy 0.5.3g (Windows x86) - 'proxy.c logurl()' Remote Buffer Overflow

/ 3proxyv0.5.3g: win32 service remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc x3proxy-win32.c -o x3proxy-win32 syntax: ./x3proxy-win32 -pr -h host sumus homepage/url: http://3proxy.ru/ 3Proxy tiny free proxy server previously known as 3APA3A tiny...

Ettercap-NG 0.7.3 Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================== Ettercap-NG 0.7.3 Remote Denial of Service Exploit ================================================== / WARNING WARNING WARNING THIS PACKAGE CONTAINS AN 0DAY. NO ONE CAN BE HELD RESPONSIBLE IF...

Ettercap-NG 0.7.3 - Remote Denial of Service

/ WARNING WARNING WARNING THIS PACKAGE CONTAINS AN 0DAY. NO ONE CAN BE HELD RESPONSIBLE IF THIS CODE RAPES YOUR SISTER OR MOLESTS YOUR DOG. WARNING WARNING WARNING THE ONE PACKET ETTERCAP KILLER NOW IN A SMALLER PACKAGE! If you want to know how this works then figure it out yourself. Tested with...

QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow

http://nbpfaus.net/pfau/ftplib/ qftp is a utility that performs file transfers using ftplib based on instructions presented on the command line. Description buffer overflow in sprintf, setumask don't check sizelen of passed argument. Source error in main: 337: case 'm' : setumaskoptarg; break;...