kill_sntsd.pl

I noticed an uncommon scanf overflow in the Simple Network Time Sync daemon and client version 1.0, tested on Redhat 6.1. I haven't looked into this fully yet, but it looks as tho it could be root comprimising as it sits on a priveledged udp port and seems to coredump, but looks like it only give...

majordomo.txt

Hi, Majordomo is a perl script for managing mailing lists. The package comes with several scripts and a program written in C wrapper that runs setuid to ensure that majordomo performs all the work with proper permissions for further information you can check the FAQ that comes with the package...

Уязвимость в infosrch.cgi

Некорректно разбираемая переменная fname позволяет выполнить приложение через perl-скрипт используя стандартный прием с | в имени файла. Кроме того, можно получить содержимое любого файла...

allmanage.pl.txt

Allmanage.pl vulnerability 13 may 2000 Websites using 'Allmanage Website Administration Software 2.6 WITH the upload ability', and maybe earlier versions , contain a vulnerability wich gives you full add/del/change access in the user-account directories and you can change the files in the main...

netsolbug.txt

networksolutions.com: www security hole. may/9/2000 Major security issue with networksolutions.comeasysteps.pl. I was in r00tabega, and someone relayed thisit was told to me Mr^Chaos found the orginal read bug:...

Solution Scripts Home Free 1.0 - search.cgi Directory Traversal

Solution Scripts Home Free 1.0 - search.cgi Directory Traversal source: https://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which...

Great Circle Associates Majordomo 1.94.4 - Local resend

source: https://www.securityfocus.com/bid/902/info It is possible to execute arbitrary commands with elevated privileges through exploiting the majordomo binary, "resend". A setuid root wrapper program calls resend after setuiding and setgiding to lowered but still elevated privileges which it ru...

RDS_exploit.txt

Ok, I'm a day or two behind on this...I took a much-needed siesta from all things binary. Anyways, below is the updated RDS exploit script. New features include: - UNC support. This has only been tested with Windows 95 shares...NT may cause authentication wackiness. Use -u \server\share\file.mdb...

iis4.htr-2.pl

Re: Retina vs. IIS4, Round 2, KO Randal L. Schwartz [email protected] Tue, 15 Jun 1999 16:59:08 -0700 "Ryan" == Ryan R Permeh writes: Ryan !/usr/bin/perl Ryan props to the absu crew Ryan use Net::Telnet; Ryan for $i=2500;$i Ryan $obj=Net::Telnet-new Host = "$ARGV0",Port = 80; Ryan my $cmd =...