125 matches found
BitchX 1.1-final (EXEC) Remote Command Execution Exploit
Exploit for linux platform in category remote exploits ======================================================== BitchX 1.1-final EXEC Remote Command Execution Exploit ======================================================== / Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions:...
pbxs11-exec.txt
/ Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions: 1.1-final and others? Synopsis: BitchX suffers from a unchecked bounds in a hash table in hook.c where one can inject data structures allowing for the remote execution of commands! Usage: Execute "gcc -o pbxs pbxs.c; ./pbxs...
BitchX / epic IRC client integer overflow
Integer overflow on parsing server banner...
[EXPL] BitchX and Epic Boundary Check Error DoS (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
BitchX 1.1-final - do_hook() Remote Denial of Service
BitchX 1.1-final - dohook Remote Denial of Service // BitchX epic =netcommcomar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s %s" at hook.c:865 // 1 0x080d013b in numberedcommand from=0xbfbfe031 'A' , // comm=-9999999, ArgList=0xbfbfd788 at numbers.c:1413 // 2 0x080d7d02 in...
BitchX <= 1.1-final do_hook() Remote Denial of Service Exploit
Exploit for multiple platform in category dos / poc ============================================================== BitchX netcommcomar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s %s" at hook.c:865 // 1 0x080d013b in numberedcommand from=0xbfbfe031 'A' , // comm=-9999999,...
BitchX <= 1.1-final do_hook() Remote Denial of Service Exploit
No description provided by source. // BitchX epic =1.1-final | dohook Boundary Check Error Remote DoS ///////////////////////////////////////////////////////////////////////// // Federico L. Bossi Bonin // fbossiatnetcommdotcomdotar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s...
BitchX 1.1-final - 'do_hook()' Remote Denial of Service
// BitchX epic =netcommcomar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s %s" at hook.c:865 // 1 0x080d013b in numberedcommand from=0xbfbfe031 'A' , // comm=-9999999, ArgList=0xbfbfd788 at numbers.c:1413 // 2 0x080d7d02 in parseserver origline=0xbfbfe030 ":", 'A' ... at...
Slackware 8.1 / 9.0 : BitchX security fixes (SSA:2003-141-02)
New BitchX packages are available to fix security problems found by Timo Sirainen. BitchX is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause BitchX to crash, or possibly to run arbitrary code as the user running BitchX. All sites running BitchX a...
BitchX <= 1.0c20 Local Buffer Overflow Exploit
No description provided by source. / Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL -...
BitchX 1.0c20 - Local Buffer Overflow
BitchX 1.0c20 - Local Buffer Overflow / Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL -...
BitchX <= 1.0c20 Local Buffer Overflow Exploit
Exploit for linux platform in category local exploits ============================================== BitchX struct char distro; char version; char bx; unsigned int returnadd; unsigned int buffsize; T = "SuSE Linux", "8.2", "BitchX-1.0c20cvs", 0xbfffff88, 2111 , "Debian Linux", "3.0",...
BitchX 1.0c20 - Local Buffer Overflow
/ Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL - http://www.gnu.org/licenses/gpl.txt -- background...
BitchX 1.0c19 Local Root Exploit (suid?)
No description provided by source. // BitchX local-root by Sha0 version 1.0c19 e inferiores -todas- // este exploit se lo dedico a mi chica. // 0xC0000000-4-strlenargv1-1-strlenbuffer // 2052 to the ret include stdio.h include string.h include stdlib.h include unistd.h char payload69; char sha0co...
BitchX 1.0c19 Local Root Exploit (suid?)
Exploit for linux platform in category local exploits ======================================== BitchX 1.0c19 Local Root Exploit suid? ======================================== // BitchX local-root by Sha0 version 1.0c19 e inferiores -todas- // este exploit se lo dedico a mi chica. //...
BitchX 1.0c19 - Local Privilege Escalation
BitchX 1.0c19 - Local Privilege Escalation // BitchX local-root by Sha0 version 1.0c19 e inferiores -todas- // este exploit se lo dedico a mi chica. // 0xC0000000-4-strlenargv1-1-strlenbuffer // 2052 to the ret include include include include char payload69; char sha0code = "\xeb\x16\x5b\x31\xc0"...
BitchX 1.0c19 - Local Privilege Escalation
// BitchX local-root by Sha0 version 1.0c19 e inferiores -todas- // este exploit se lo dedico a mi chica. // 0xC0000000-4-strlenargv1-1-strlenbuffer // 2052 to the ret include include include include char payload69; char sha0code = "\xeb\x16\x5b\x31\xc0" "\x50\x53\xb0\x0b\x89"...
Debian DSA-306-1 : ircii-pana - buffer overflows, integer overflow
Timo Sirainen discovered several problems in BitchX, a popular client for Internet Relay Chat IRC. A malicious server could craft special reply strings, triggering the client to write beyond buffer boundaries or allocate a negative amount of memory. This could lead to a denial of service if the...