antisniff x86/linux remote root exploit, including "fixed" 1.02 version

/ l0phtl0phe.c - antisniff exploit 1.02 included -sc/teso gcc -o l0phtl0phe l0phtl0phe.c -Wall -lnet libnet-config --defines description: l0pht messed up the fix for their problem in antisniff by not regarding the type signedness properties of the char and int values used. this results in a cool...

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

RedHat Linux 6.x - X Font Server Buffer Overflow Denial of Service // source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This...

CVE-1999-0822

Buffer overflow in Qpopper qpop 3.0 allows remote root access via AUTH command...

CVE-1999-0822

Buffer overflow in Qpopper qpop 3.0 allows remote root access via AUTH command...

ISC BIND 8.2.2 IRIX 6.5.17 Solaris 7.0 - NXT Overflow Denial of Service

ISC BIND 8.2.2 IRIX 6.5.17 Solaris 7.0 - NXT Overflow Denial of Service // source: https://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records...

ISC BIND 8.2.2 / IRIX 6.5.17 / Solaris 7.0 - NXT Overflow / Denial of Service

// source: https://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records. The consequence of this being exploited is a remote root compromise...

RFP9905.zeus.remote.root.txt

--- Advisory RFP9905 ------------------------------- rfp.labs ----------- Remote root compromise via Zeus webserver Zeus-search vulnerability --------------------------------- rain forest puppy / [email protected] -- Table of contents: - 1. Scope of problem - 2. Solution - 3. Miscellaneous Updates...

pepsi.txt

-----BEGIN PGP SIGNED HUMOR----- Hash: SHA1 It seems cans of Pepsi and Diet Pepsi have a possible remote root problem on them. While recently eyeing a can of coke while sitting on my terminal I noticed that I could actually drink from it while standing at a distance of at least 3 feet. The sploit...

PT-1999-1427 · Washington University · Wu-Ftpd

Name of the Vulnerable Software and Affected Versions: WU-FTPD affected versions not specified Description: A buffer overflow issue in WU-FTPD and related FTP servers allows remote attackers to gain root privileges. This is achieved by exploiting macro variables in a message file. Recommendations...

CVE-1999-0353

CVE-1999-0353 concerns HP-UX rpc.pcnfsd, where improper handling of the main printer spool directory permissions allowed remote root access. Affected software is HP-UX on the s700/s800 series (11.x) per patch references. The root cause is described in patches noting that rpc.pcnfsd has an error i...

CVE-1999-0353

rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory...

proftpd_exploit.txt

Subject: ProFTPD To: [email protected] / !!!! Private .. ... distribute !!!! proftpd-1.2.0 remote root exploit beta2 Still need some code, but it works fine Offset: Linux Redhat 6.0 0 - proftpd-1.2.0pre1 0 - proftpd-1.2.0pre2 0 - proftpd-1.2.0pre3 If this dont work, try changing the align...

FreeBSD_FTP_port_holes.txt

Subject: [email protected]: FreeBSD Security Advisory: FreeBSD-SA-99:03.ftpd REISSUED To: [email protected] [email protected] 2.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xBE7497F1 Signed: 9/15/99 11:30:30 PM...

ProFTPd 1.2 pre6 - snprintf Remote Root

ProFTPd 1.2 pre6 - snprintf Remote Root source: https://www.securityfocus.com/bid/650/info Lack of user input validation in ProFTPD can lead to a remote root vulnerability. On systems that support it ProFTPD will attempt to modify the name of the program being executed argv0 to display the comman...

ProFTPd 1.2 pre6 - 'snprintf' Remote Root

source: https://www.securityfocus.com/bid/650/info Lack of user input validation in ProFTPD can lead to a remote root vulnerability. On systems that support it ProFTPD will attempt to modify the name of the program being executed argv0 to display the command being executed by the logged on user. ...

FreeBSD-SA-99:03.ftpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:03 Security Advisory FreeBSD, Inc. Topic: Three ftp daemons in ports vulnerable to attack. Category: ports Module: wu-ftpd and proftpd Announced: 1999-09-05 Reissued:...

fts.find.du.bsd.txt

Date: Wed, 12 May 1999 14:32:42 +0400 From: Stas Kisel To: [email protected] Subject: fts, du, find Hi. I use FreeBSD-2.2.8 and FreeBSD-2.2.7 and I know that these versions are no longer supported, but: 1. There are many people still using 2.2 2. This bug probably applies to FreeBSD-3.1 and ev...

CVE-1999-0692

The default configuration of the Array Services daemon arrayd disables authentication, allowing remote users to gain root privileges...

SGI Advanced Linux Environment 3.0 SGI IRIX 6.5.4 SGI UNICOS 10.0 6 - arrayd.auth Default Configuration

SGI Advanced Linux Environment 3.0 SGI IRIX 6.5.4 SGI UNICOS 10.0 6 - arrayd.auth Default Configuration / source: https://www.securityfocus.com/bid/530/info The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is par...

SGI Advanced Linux Environment 3.0 / SGI IRIX 6.5.4 / SGI UNICOS 10.0 6 - arrayd.auth Default Configuration

/ source: https://www.securityfocus.com/bid/530/info The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is part of the arrayservices5 and is known as the array services daemon. The default configuration for...