Samba trans2open Overflow (Solaris SPARC)

This exploits the buffer overflow found in Samba versions 2.2.0 to 2.2.8. This particular module is capable of exploiting the flaw on Solaris SPARC systems that do not have the noexec stack option set. Big thanks to MC and valsmith for resolving a problem with the beta version of this module...

CVE-2003-1077

Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service UFS file system hang...

Solaris dtspcd Heap Overflow

This is a port of noir's dtspcd exploit. This module should work against any vulnerable version of Solaris 8 sparc. The original exploit code was published in the book Shellcoder's Handbook. Module Options msf use exploit/solaris/dtspcd/heap/noir msf undefinednoir show actions ...actions... msf...

solaris 9 sparc rcp

hallo, freshly installed solaris 9 sparc. one more suid segfault: bash-2.05$ uname -a SunOS solaris9 5.9 Generic sun4u sparc SUNW,Ultra-510 bash-2.05$ ls -l /usr/sbin/static/rcp -r-sr-xr-x 1 root bin 787700 Apr 6 16:58 /usr/sbin/static/rcp bash-2.05$ /usr/sbin/static/rcp perl -e 'print "A" x 1000...

CVE-2002-0203

CVE-2002-0203 affects Tarantella Enterprise where the CGI ttawebtop.cgi in versions 3.0x–3.20 (and 3.11.903) on SPARC Solaris and Linux allows remote attackers to view directory contents by supplying an empty pg parameter. The root cause is an unprotected handling of the pg parameter in ttawebtop...

CVE-2002-0203: Undefined Security Weakness

ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter...

Slrnpull Buffer Overflow (-d parameter)

Slrnpull Buffer Overflow -d parameter ======================================= Author: Alex Hernandez [email protected] Thanks all the people from Spain and Argentina. Special Greets: White-B, Paco Spain, Gabriel M. Thanks friends for all the research: + Solar Eclipse...

[SECURITY] [DSA-096-2] mutt buffer overflow, sparc update

Package : mutt Problem type : buffer overflow Debian-specific: no The sparc binary for the mutt security fix described in DSA-096-1 is now available. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.2 alias potato -...

Solaris /bin/login Remote Root Exploit (SPARC/x86)

Exploit for linux platform in category remote exploits ================================================== Solaris /bin/login Remote Root Exploit SPARC/x86 ================================================== / 7350963 - /bin/login remote root explot SPARC/x86 TESO CONFIDENTIAL - SOURCE MATERIALS Th...

Solaris binlogin (SPARCx86) - Remote Code Execution

Solaris binlogin SPARCx86 - Remote Code Execution / 7350963 - /bin/login remote root explot SPARC/x86 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. C COPYRIGHT TESO Security, 2001 All Rights Reserved bug found by scut 2001/12/20 thanks to...

oracle8.exploit.txt

---------- Forwarded message ---------- Date: Sat, 13 Nov 1999 15:01:08 -0600 From: [email protected] To: [email protected] Subject: BOUNCE [email protected]: Approval required: From [email protected] Sat Nov 13 15:01:06 1999 Received: from sword.damocles.com...

locale_sol.txt

----/ Exploiting the Libc Locale Subsystem Format String Vulnerability on Solaris/SPARC ---/ 10/10/2000 -/ Solar Eclipse ---/ I. Introduction This paper describes in detail the exploitation of the libc locale format strin g vulnerability on Solaris/SPARC. The full source code for the exploit is...

CVE-1999-1396

Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service crash...

CVE-1999-1396

The CVE-1999-1396 entry concerns SunOS 4.1–4.1.2 on SPARC where the integer multiplication emulation code is vulnerable. Local users could gain root privileges or trigger a denial of service (crash) due to the described flaw. Public references exist (e.g., CERT advisory CA-1992-15, SecurityFocus ...

CVE-1999-1449: Undefined Security Weakness

SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service kernel panic by reading from the /dev/tcx0 TCX device...

CVE-1999-1396: Undefined Security Weakness

Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service crash...

[SECURITY] [DSA-075-2] [sparc-only] telnetd-ssl AYT buffer overflow

---------------------------------------------------------------------------- Debian Security Advisory DSA 075-2 [email protected] http://www.debian.org/security/ Martin Schulze August 14, 2001 - ---------------------------------------------------------------------------- Package :...

[SECURITY] [DSA-046-2] exuberant-ctags for sparc was incorrectly built

Package : exuberant-ctags Problem type : recompile of sparc package Debian-specific: yes The updated exuberant-ctags that was mentioned in DSA-046-1 was unfortunately compiled incorrectly: the stable chroot we used turned out to be running unstable instead. A new package with version 1:3.2.4-0.1....

[SECURITY] [DSA-048-2] samba for sparc was incorrectly built

Package : samba Problem type : recompile of sparc packages Debian-specific: yes The updated samba packages that were mentioned in DSA-048-1 were unfortunately compiled incorrectly: the stable chroot we used turned out to be running unstable instead. A new package with version 2.0.7-3.2.1 have bee...

Solaris 78 - kcms_configure Command-Line Buffer Overflow (2)

Solaris 78 - kcmsconfigure Command-Line Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow...