Solaris 2.5/2.5.1 - 'getgrnam()' Local Overflow

include include / getgrnam function overflow. works against Solaris 2.5/2.5.1 SPARC default offset should work. Pablo Sor, Buenos Aires, Argentina. [email protected] / uchar shell = "\x82\x10\x20\xca\xa6\x1c\xc0\x13\x90\x0c\xc0\x13\x92\x0c\xc0\x13"...

Solaris 2.5 / 2.5.1 getgrnam() Local Overflow Exploit

Exploit for solaris platform in category local exploits ===================================================== Solaris 2.5 / 2.5.1 getgrnam Local Overflow Exploit ===================================================== include include / getgrnam function overflow. works against Solaris 2.5/2.5.1 SPA...

[SECURITY] New version of splitvt released

Package: splitvt Vulnerability: local root exploit Debian-specific: no The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions, is vulnerable to a local buffer overflow. This could be exploited to give a shell runni...

Solaris 7.0 - 'kcms_configure' Local Overflow / Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/831/info The binary kcmsconfigure, part of the Kodak Color Management System package shipped with OpenWindows and ultimately, Solaris is vulnerable to a local buffer overflow. The buffer which the contents of the environment variable NETPATH are copied...

SuSE Linux 6.16.2 - cwdtools Local Overflow Local Privilege Escalation

SuSE Linux 6.16.2 - cwdtools Local Overflow Local Privilege Escalation ! /bin/sh source: https://www.securityfocus.com/bid/738/info cdwtools is a package of utilities for cd-writing. The linux version of these utilities, which ships with S.u.S.E linux 6.1 and 6.2, is vulnerable to several local...

SuSE Linux 6.1/6.2 - 'cwdtools' Local Overflow / Local Privilege Escalation

!/bin/sh source: https://www.securityfocus.com/bid/738/info cdwtools is a package of utilities for cd-writing. The linux version of these utilities, which ships with S.u.S.E linux 6.1 and 6.2, is vulnerable to several local root compromises. It is known that there are a number of ways to exploit...

Sun Solaris 7.0 - usrdtbinsdtcm_convert Local Overflow Local Privilege Escalation

Sun Solaris 7.0 - usrdtbinsdtcmconvert Local Overflow Local Privilege Escalation / source: https://www.securityfocus.com/bid/166/info Sdtcmconvert is a setuid-root data conversion utility which converts OpenWindows version 3 calendar data files to version 4 and vice versa. A buffer overflow...

Solaris 2.4 passwd yppasswd nispasswd - Local Overflow

Solaris 2.4 passwd yppasswd nispasswd - Local Overflow ---------------------------- file newpass.c ------------------------------- include include define hiddenpasswd "/bin/hpasswd" /change here .../ define MAXLENGTH 32 void mainint argc, char argv int i; char args10; ifargc MAXLENGTH printf"You...