2197 matches found
DSA-1202-1 screen - programming error
Bulletin has no description...
Solaris/SPARC 2.7 / 7 locale Format String Exploit
No description provided by source. / Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7 Based on the exploit by Warning3 [email protected] For additional information see http://www.phreedom.org/solar/localesol.txt By Solar Eclipse [email protected] Assistant...
Solaris 2.6/7/8/9 (ld.so.1) Local Root Exploit (sparc)
No description provided by source. / $Id: raptorldpreload.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorldpreload.c - ld.so.1 local, Solaris/SPARC 2.6/7/8/9 Copyright c 2003-2004 Marco Ivaldi [email protected] Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 throug...
Solaris 9 / 10 ld.so Local Root Exploit (2)
No description provided by source. / Solaris 9 on SPARC: $ cat dupa.c / char sh = / setuid / "\x90\x08\x3f\xff\x82\x10\x20\x17\x91\xd0\x20\x08" / execve / "\x20\xbf\xff\xff\x20\xbf\xff\xff\x7f\xff\xff\xff\x90\x03\xe0\x20" "\x92\x02\x20\x10\xc0\x22\x20\x08\xd0\x22\x20\x10\xc0\x22\x20\x14"...
Solaris 2.4 passwd, yppasswd, and nispasswd Overflow Exploits
No description provided by source. ---------------------------- file newpass.c ------------------------------- include stdio.h include syslog.h define hiddenpasswd "/bin/hpasswd" /change here .../ define MAXLENGTH 32 void mainint argc, char argv int i; char args10; ifargc 10 args0=hiddenpasswd;...
Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version
No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...
X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (solaris/sparc)
No description provided by source. / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security [email protected], Ramon de Carvalho Valle [email protected] ExpCode.com This program is free software; you can redistribute it and/or modify it under the...
wu-ftpd 2.6.0 Remote Format Strings Exploit
No description provided by source. / 12:40 11/10/00: Tool for either attack or defense within an information warfare setting. Rather, it is a small program demonstrating proof of concept. Default values for solaris 2.8 and inetd. If you are not the intended recipient, or a person responsible for...
Solaris /bin/login Remote Root Exploit (SPARC/x86)
No description provided by source. / 7350963 - /bin/login remote root explot SPARC/x86 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. C COPYRIGHT TESO Security, 2001 All Rights Reserved bug found by scut 2001/12/20 thanks to...
solaris/sparc executes command after setreuid 92 bytes + cmd
solaris/sparc executes command after setreuid 92 bytes + cmd. Shellcode exploit for solarissparc platform / bunkersparcexec.c V1.0 - Sat Oct 21 17:45:27 CEST 2006 Solaris/sparc bytecode that executes command after setreuid 92 bytes + cmd setreuid0, 0 + execve"/bin/sh", "/bin/sh","-c","cmd", NULL;...
solaris/sparc executes command after setreuid (92 bytes + cmd)
Exploit for solaris/sparc platform in category shellcode ============================================================== solaris/sparc executes command after setreuid 92 bytes + cmd ============================================================== / bunkersparcexec.c V1.0 - Sat Oct 21 17:45:27 CEST...
Solaris 10 (sparc) : 124206-02
SunOS 5.10: libtsol patch. Date this patch was last updated by Sun : Oct/10/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 10 (libnspr) Arbitrary File Creation Local Root Exploit
Exploit for solaris platform in category local exploits =============================================================== Solaris 10 libnspr Arbitrary File Creation Local Root Exploit =============================================================== !/bin/sh $Id: raptorlibnspr,v 1.1 2006/10/13 19:12:...
Solaris 8 (sparc) : 116959-21
SunOS 5.8: nfs and rpcmod patch. Date this patch was last updated by Sun : Dec/04/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
[SA22083] Sun Solaris "syslog" Denial of Service Vulnerability
TITLE: Sun Solaris "syslog" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA22083 VERIFY ADVISORY: http://secunia.com/advisories/22083/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/ Sun Solaris 8...
USN-347-1: Linux kernel vulnerabilities
Sridhar Samudrala discovered a local Denial of Service vulnerability in the handling of SCTP sockets. By opening such a socket with a special SOLINGER value, a local attacker could exploit this to crash the kernel. CVE-2006-4535 Kirill Korotaev discovered that the ELF loader on the ia64 and sparc...
X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (solaris/sparc)
Exploit for solaris platform in category local exploits ==================================================================== X11R6 Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10,...
X11R6 6.4 XKEYBOARD (SolarisSPARC) - Local Buffer Overflow (2)
X11R6 6.4 XKEYBOARD SolarisSPARC - Local Buffer Overflow 2 / $Id: raptorxkb.c,v 1.1 2006/09/13 16:18:36 raptor Exp $ raptorxkb.c - XKEYBOARD Strcmp, Solaris/SPARC 8/9/10 Copyright c 2006 Marco Ivaldi Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and...
X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (solaris/sparc)
Exploit for solaris platform in category local exploits ==================================================================== X11R6 , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by th...
X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (1)
/ X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...