Solaris 2.5/2.6/7.0/8 kcms_configure KCMS_PROFILES Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the KCMSPROFILES environment variable...

Solaris 2.5/2.6/7.0/8 kcms_configure KCMS_PROFILES Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the KCMSPROFILES environment variable...

solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes

Exploit for solaris/x86 platform in category shellcode ==================================================== Solaris/x86 - Sync & reboot & exit0 - 48 bytes ==================================================== / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan Web:...

Solaris/x86 - SystemV killall command - 39 bytes

Solaris/x86 - SystemV killall command - 39 bytes. Shellcode exploit for solaris platform / Title: Solaris/x86 - SystemV killall command - 39 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan ! Database of shellcodes:...

Solaris/x86 - Remote Download file - 79 bytes

Solaris/x86 - Remote Download file - 79 bytes. Shellcode exploit for solarisx86 platform / Title: Solaris/x86 - Remote Download file - 79 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Database of Shellcodes...

solaris/x86 - Remote Download file - 79 bytes

Exploit for solaris/x86 platform in category shellcode ============================================= solaris/x86 - Remote Download file - 79 bytes ============================================= / Title: Solaris/x86 - Remote Download file - 79 bytes Author: Jonathan Salwan Web:...

Solaris/x86 - Reboot - 37 bytes

Solaris/x86 - Reboot - 37 bytes. Shellcode exploit for solarisx86 platform / Title: Solaris/x86 - Reboot - 37 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan Date: 2010-05-21 Tested: SunOS opensolaris 5.11 snv111b i86pc i386 i86pc Solaris...

solaris/x86 - Reboot() - 37 bytes

Exploit for solaris/x86 platform in category shellcode ================================= solaris/x86 - Reboot - 37 bytes ================================= / Title: Solaris/x86 - Reboot - 37 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/shellstorm Date:...

Solaris/x86 - Halt shellcode - 36 bytes

Solaris/x86 - Halt shellcode - 36 bytes. Shellcode exploit for solarisx86 platform / Title: Solaris/x86 - Halt shellcode - 36 bytes Auhtor: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan Date: 2010-05-20 Tested: SunOS opensolaris 5.11 snv111b i86pc i386...

solaris/x86 - Halt shellcode - 36 bytes

Exploit for solaris/x86 platform in category shellcode ======================================= Solaris/x86 - Halt shellcode - 36 bytes ======================================= / Title: Solaris/x86 - Halt shellcode - 36 bytes Auhtor: Jonathan Salwan Web: http://www.shell-storm.org Twitter:...

solaris/x86 - execve("/bin/sh","/bin/sh",NULL) - 27 bytes

Exploit for solaris/x86 platform in category shellcode ========================================================= solaris/x86 - execve"/bin/sh","/bin/sh",NULL - 27 bytes ========================================================= / Title: Solaris/x86 - execve"/bin/sh","/bin/sh",NULL - 27 bytes Autho...

solaris/x86 setuid(0) execve(//bin/sh)

No description provided by source. / ; sm4x 2008 ; setuid0, execve'/bin/sh', '/bin/sh', 0, ; 39 bytes NizzULL free you know... ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; quick port to drop root sh - ; - SunOS is pwnij global start start: xor eax, eax ; --- setuid0 push eax push eax mov a...

Code injection

The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...

CVE-2009-4211

The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...

CVE-2009-4211

The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...

CVE-2009-3692

Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors...

CVE-2009-3692

Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors...

solaris/x86 portbind/tcp shellcode generator

No description provided by source. ?php / Utility : Solaris/x86 - Generate PortBind/TCP shellcode Author : Jonathan Salwan Mail : submit ! shell-storm.org More shellcodes in = http://www.shell-storm.org/shellcode/ / function syntax echo "\nSyntax:\nroot@laptop:/ php ./payload.php port\n\n";...

solaris/x86 portbind/tcp shellcode generator

Exploit for solaris/x86 platform in category shellcode ============================================ solaris/x86 portbind/tcp shellcode generator ============================================ \n\n"; function win32bind$port if$port 65535 || $port 4100 echo "Erreur Port\nSelect a port between 4100 an...

Solaris/x86 - add services and execve inetd - 201 bytes

No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / char c0de =...