NetBSD FTPd / tnftpd Remote Stack Overflow PoC

No description provided by source. !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to other systems. It offers many enhancements over the traditional BSD ftpd, including per-class configuration directives via ftpd.conf5, RFC 2389 and...

NetBSD - FTPd Tnftpd Remote Stack Overflow (PoC)

NetBSD - FTPd Tnftpd Remote Stack Overflow PoC !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to other systems. It offers many enhancements over the traditional BSD ftpd, including per-class configuration directives via ftpd.conf5, RFC 23...

CVE-2006-6165

ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party, stating that it is...

CVE-2006-6165

ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party, stating that it is...

CVE-2006-6165

CVE-2006-6165 concerns ld.so in FreeBSD and NetBSD (and possibly other BSDs) that does not remove certain harmful environment variables before loading processes, enabling local privilege escalation by manipulating environment variables. The impact is described as local confidentiality, integrity,...

NetBSD多个本地拒绝服务漏洞

NetBSD是一款开放源代码的操作系统。 NetBSD由于不正确验证用户输入，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 NetBSD NetBSD 3.0.1 NetBSD NetBSD 3.0 NetBSD NetBSD 2.1 NetBSD NetBSD 2.0.3 NetBSD NetBSD 2.0.2 NetBSD NetBSD 2.0.1 NetBSD NetBSD 2.0 NetBSD NetBSD 2.0.4 用户可以通过CVS进行内核升级： http://www.netbsd.org/...

PT-2006-6799 · Freebsd · Ld.So

Name of the Vulnerable Software and Affected Versions: ld.so in FreeBSD, NetBSD, and possibly other BSD distributions affected versions not specified Description: The issue allows local users to gain privileges by passing certain environment variables to loading processes, as ld.so does not remov...

NetBSD多个本地信息泄露漏洞

NetBSD是一款开放源代码的操作系统。 NetBSD在返回内核内存到用户空间时缺少过滤，本地攻击者可以利用漏洞获得内核敏感信息。 目前没有详细漏洞细节提供。 NetBSD NetBSD 3.0.1 NetBSD NetBSD 3.0 NetBSD NetBSD 2.1 NetBSD NetBSD 2.0.3 NetBSD NetBSD 2.0.2 NetBSD NetBSD 2.0.1 NetBSD NetBSD 2.0 NetBSD NetBSD Current NetBSD NetBSD 3,1RC1 NetBSD NetBSD 2.1.1 NetBSD NetBSD 2.0.4...

CVE-2006-6014

The NetBSD-current kernel before 20061028 does not properly perform bounds checking of an unspecified userspace parameter in the ptrace system call during a PTDUMPCORE request, which allows local users to have an unknown impact...

CVE-2006-6014

The NetBSD-current kernel before 20061028 does not properly perform bounds checking of an unspecified userspace parameter in the ptrace system call during a PTDUMPCORE request, which allows local users to have an unknown impact...

CVE-2006-6014

CVE-2006-6014 affects the NetBSD-current kernel prior to 20061028. The flaw is a bounds-checking issue in the ptrace system call during PT_DUMPCORE, where an unspecified userspace parameter is not properly validated. This allows local users to cause an unknown impact. The vulnerability and its de...

NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure

NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure 11/15/2006 Notice =================== This bug has been specially discovered for the Month of Kernel Bugs and to the Hackers to Hackers Conference III http://www.h2hc.org.br/en/. Summary =================== Firewir...

NetBSD PPP驱动远程溢出漏洞

NetBSD是一款免费开放源代码的UNIX性质的操作系统。 在处理从远程主机所接收到的连接控制协议LCP配置选项时，ppp4没有正确的验证选项长度，这可能导致在所分配的内核内存缓冲区以外读取或写入数据。 能够发送LCP报文的攻击者，包括ppp4连接的远端，可以导致内核忙碌、获得敏感信息或权限提升。 FreeBSD FreeBSD 6.x FreeBSD FreeBSD 5.5 FreeBSD FreeBSD 5.4 FreeBSD FreeBSD 5.3 FreeBSD FreeBSD 4.x NetBSD NetBSD 4.0Beta NetBSD NetBSD 3.1RC1 NetB...

BSD chpass (pw_error(3)) Local Root Exploit

No description provided by source. / TESO BSD chpass exploit - caddis [email protected] greets: !teso, !w00w00, hert!, ozsecurity, plus613 / include stdio.h char bsdshellcode = "\xeb\x16\x5e\x31\xc0\x8d\x0e\x89" "\x4e\x08\x89\x46\x0c\x8d\x4e\x08" "\x50\x51\x56\x50\xb0\x3b\xcd\x80"...

Samba 2.2.8 Remote Root Exploit - sambal.c

No description provided by source. / Remote root exploit for Samba 2.2.x and prior that works against Linux all distributions, FreeBSD 4.x, 5.x, NetBSD 1.x and OpenBSD 2.x, 3.x and 3.2 non-executable stack. sambal.c is able to identify samba boxes. It will send a netbios name packet to port 137. ...

BSD (telnetd) Remote Root Exploit

No description provided by source. / 7350854 - x86/bsd telnetd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...

CVE-2006-5215

The Xsession script, as used by X Display Manager xdm in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file...

CVE-2006-5218

Integer overflow in the systracepreprepl function STRIOCREPLACE in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service crash, gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl...

CVE-2006-5215

The Xsession script, as used by X Display Manager xdm in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file...

CVE-2006-5214

Race condition in the Xsession script, as used by X Display Manager xdm in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession...