1726 matches found
PT-2002-1565 · Openbsd · Openbsd
Name of the Vulnerable Software and Affected Versions: OpenBSD version 3.0 Description: The issue allows remote attackers to determine if a port is being filtered due to the TTL being different from the default TTL in the RST packet. This occurs because the PF in OpenBSD 3.0 with the return-rst...
OpenBSD kernel fails to properly check closed file descriptors "0-2" when running setuid program
Overview The OpenBSD kernel does not adequately check file descriptors 0-2 prior to execing setuid binaries. Other OS kernels may be vulnerable as well. Description The OpenBSD kernel does not adequately check file descriptors 0-2 prior to execing setuid binaries. As a result, an attacker may be...
psyBNC 2.3 - Denial of Service
/ psyBNC include include include include include include include include include define SIZE 9000 define PORT 31337 define USER "pr0ix" int senddosint port, int size, char target, char user; int checkvuln...
OpenBSD local DoS and root exploit
The following is research material from FozZy from Hackademy and Hackerz Voice newspaper http://www.hackerzvoice.org, and can be distributed modified or not if proper credits are given to them. For educational purposes only, no warranty of any kind, I may be wrong, this post could kill you mail...
Privelege escalation via cron in OpenBSD
During mail'ing of job results shell characters are not properly escaped for mail command...
OpenBSD Local Root Compromise
ZOOM International Security Advisory OpenBSD local root compromise Systems affected: OpenBSD all version, OpenBSD Current prior April 8, 2002 Risk: High Date: April 11, 2002 Legal Notice: This advisory is copyright c ZOOM International. Disclaimer: Information contained in this advisory are...
OpenBSD 2.93.0 - Default Crontab Root Command Injection
OpenBSD 2.93.0 - Default Crontab Root Command Injection / source: https://www.securityfocus.com/bid/4495/info OpenBSD ships with a number of cron jobs configured by default. The tasks are for the purpose of summarizing system information. The mail1 utility is used to send the summaries to the roo...
OpenBSD 2.9/3.0 - Default Crontab Root Command Injection
/ source: https://www.securityfocus.com/bid/4495/info OpenBSD ships with a number of cron jobs configured by default. The tasks are for the purpose of summarizing system information. The mail1 utility is used to send the summaries to the root user. This utility supports escaped characters in...
TCP Connections to a Broadcast Address on BSD-Based Systems
BSD-based TCP/IP code has a bug with respect to creating TCP connections to a broadcast address. This bug can potentially be a security vulnerability when firewall administrators assume that the TCP implementation works correctly and do not block broadcast addresses. If good security practices ha...
CVE-2001-1047
OpenBSD kernel VFS is impacted by a race condition that can lead to a local denial of service (kernel panic). The vulnerability arises when (1) a pipe is created in one thread and another thread closes/sets a descriptor to NULL, or (2) dup2 is used on a descriptor in one process and it is later s...
CVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service kernel panic by 1 creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or 2 calling dup2 on a file descriptor in one process, then setting the descriptor to NU...
Проблемы ptrace() в OpenBSD/NetBSD (privelege escalation)
С помощью ptrace можно изменить последовательность выполнения suid-приложения...
OpenBSD - ftp Local Overflow
OpenBSD - ftp Local Overflow / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed t...
OpenBSD ftp Exploit (teso)
Exploit for bsd platform in category local exploits ========================== OpenBSD ftp Exploit teso ========================== / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO...
OpenBSD - 'ftp' Local Overflow
/ 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or...
CVE-2001-1559
The uipc system calls uipcsyscalls.c in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference...
PT-2001-2644 · Openbsd · Openbsd
Name of the Vulnerable Software and Affected Versions: OpenBSD versions 2.9 through 3.0 Description: The issue allows local users to cause a denial of service and trigger a null dereference due to the uipc system calls providing user mode return instead of kernel mode values to the fdrelease...
ATPhttpd 0.4 DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ATPhttpd 0.4 DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 13, 2001 Product / Vendor: ATPhttpd, the tiny, caching, high performance webserver. ATPhttpd is ideal for serving lots of static content, especially where disk I/O is...
UseLogin.txt
-- OpenSSH UseLogin bug proof of concept exploit -- by WaR / http://www.genhex.org -- Intro -- I was very curious in finding out how to exploit this problem. Although I don't think anyone uses this feature, I looked into the matter anyway. Here it goes. It was tested on the following platforms: -...