Solaris/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (61 bytes)

Solaris/x86 - setuid0 + /bin/cat /etc/shadow Shellcode 61 bytes. Shellcode exploit for Solarisx86 platform. Tags: Metasploit Framework MSF Name = John Babio Twitter = 3vi1john SunOS opensolaris 10 5.11 i86pc i386 i86pc setuid0 /bin/cat //etc/shadow char code=...

solaris/x86 setuid(0), execve(//bin/sh); exit(0) NULL Free 39 bytes

Exploit for solaris/x86 platform in category shellcode =================================================================== solaris/x86 setuid0, execve//bin/sh; exit0 NULL Free 39 bytes =================================================================== / ; sm4x 2008 ; setuid0, execve'/bin/sh',...

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes. Shellcode exploit for solarisx86 platform / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is...

solaris/x86 setuid(0), execve(/bin/cat, /etc/shadow), exit(0) 59 bytes

Exploit for solaris/x86 platform in category shellcode ====================================================================== solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes ====================================================================== / ; sm4x 2008 ; /bin/cat /etc/shado...

solaris/x86 add services and execve inetd 201 bytes

No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / ...

Solaris 8 (x86) : 113750-02

SunOS 5.8x86: User Manager CLI Patch. Date this patch was last updated by Sun : Dec/22/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

solaris/x86 add services and execve inetd 201 bytes

Exploit for solaris/x86 platform in category shellcode =================================================== solaris/x86 add services and execve inetd 201 bytes =================================================== / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root...

solaris/x86 add services and execve inetd 201 bytes

solaris/x86 add services and execve inetd 201 bytes. Shellcode exploit for solarisx86 platform / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old...

solaris/x86 execve /bin/sh toupper evasion 84 bytes

solaris/x86 execve /bin/sh toupper evasion 84 bytes. Shellcode exploit for solarisx86 platform / Solaris/x86 Used for toupper evasion look to the linux version for an explanation and usage example. / char c0de = / main: / "\xeb\x33" / jmp callz / / start: / "\x5e" / popl %esi / "\x8d\x06" / leal...

Solaris 8 (x86) : 110944-04

SunOS 5.8x86: /usr/bin/tcsh patch. Date this patch was last updated by Sun : Mar/10/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

alt3kx-advisories-2001-002.txt

====================================================================== Remote Buffer Overflow Under Solarisx86 NTOP - NEtwork Monitor vulnerable to compromise the system Author: alt3kx! Alternative: Date: 2001-05-23 Site: www.raza-mexicana.org Greet to: 0x90, Dex, PaTa , Rebel and S0r from AR &...

CVE-1999-1588

Buffer overflow in nlpsserver in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen aka System V listener port, TCP port 2766...

Solaris 2.52.67.08 - kcms_configure KCMS_PROFILES Buffer Overflow (2)

Solaris 2.52.67.08 - kcmsconfigure KCMSPROFILES Buffer Overflow 2 / source: https://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the...

Solaris 2.5/2.6/7.0/8 - kcms_configure KCMS_PROFILES Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the KCMSPROFILES environment variable parser in a shared library...

Solaris 2.5/2.6/7.0/8 - kcms_configure KCMS_PROFILES Buffer Overflow (2)

/ source: https://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the KCMSPROFILES environment variable parser in a shared library...

Hughes Technologies Mini SQL (mSQL) 2.0.11 - w3-msql Remote Buffer Overflow

Hughes Technologies Mini SQL mSQL 2.0.11 - w3-msql Remote Buffer Overflow // source: https://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be...

Hughes Technologies Mini SQL (mSQL) 2.0.11 - 'w3-msql' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be exploitable. The exploitable buffer is the content-length field and the...

CVE-1999-0139

CVE-1999-0139 describes a buffer overflow in Solaris x86 mkcookie that allows local users to obtain root access. The Red Hat, EUVD, CVE, and NVD entries confirm the issue and its local-privilege-elevation impact. The provided records do not specify affected Solaris versions, exact vulnerable func...

CVE-1999-0139

Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access...

Solaris x86 2.42.5 - nlps_server Buffer Overflow

Solaris x86 2.42.5 - nlpsserver Buffer Overflow // source: https://www.securityfocus.com/bid/2319/info Solaris 2.4, 2.5, and 2.51 x86 are vulnerable to a buffer overflow in nlpsserver, a process residing on port 2766 when installed. Attackers can exploit this buffer overflow to gain remote root...