bsdi/x86 execve /bin/sh toupper evasion 97 bytes

Exploit for bsdi/x86 platform in category shellcode ================================================ bsdi/x86 execve /bin/sh toupper evasion 97 bytes ================================================ / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor...

bsdi/x86 execve /bin/sh 46 bytes

Exploit for bsdi/x86 platform in category shellcode ================================ bsdi/x86 execve /bin/sh 46 bytes ================================ / BSDi execve of /bin/sh by v9 email protected / static char exec= "\xeb\x1f\x5e\x31\xc0\x89\x46\xf5\x88\x46\xfa\x89\x46\x0c" / 14 characters. /...

Mercantec SoftCart 4.00b - CGI Overflow (Metasploit)

Mercantec SoftCart 4.00b - CGI Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2001-1154

CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...

CVE-2001-1133

Technical details about CVE-2001-1133 are not publicly provided in the supplied documents. No concrete affected products, versions, root cause, impact, or remediation are present. Monitor for updates in future disclosures.

CVE-2001-1154

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

CVE-2001-1133

Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service reboot in the kernel via a particular sequence of instructions...

CVE-1999-1047

When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities...

CVE-1999-1047

Gauntlet 5.0 BSDI: When patches are installed in a particular order, the system allows remote attackers to bypass firewall access restrictions and prevents logging of those activities. Affected component: Gauntlet firewall on BSDI with specific patch ordering. Root cause described as the patch se...

CVE-2001-1541

Buffer overflow in Unix-to-Unix Copy Protocol UUCP in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument...

CVE-2001-1154

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

CVE-2001-1133

Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service reboot in the kernel via a particular sequence of instructions...

BSDi (3.0/3.1) reboot machine code as any user (non-specific)

this is something from a little while back. thought i might as well post it for some sort of use, generally a pretty minimal problem. has similar effects to the old f00f bug. except this reboots the machine, instead of having a freezing effect. original source: http://realhalo.org/killbsdi.c --...

BSDI 3.0/3.1 - Local Kernel Denial of Service

/ source: https://www.securityfocus.com/bid/3220/info It has been reported that there is a locally exploitable vulnerability in BSDI. It is allegedly possible for a userland process to cause the kernel to halt. This may be due to a bad system call. / / BSDiv3.0/3.1 system failure, by...

Пользователь может вызвать перезагрузку BSDI (f00f bug)

Определенный набор инструкций приводит к перезагрузке системы...

BSDI 3.03.1 - Local Kernel Denial of Service

BSDI 3.03.1 - Local Kernel Denial of Service / source: https://www.securityfocus.com/bid/3220/info It has been reported that there is a locally exploitable vulnerability in BSDI. It is allegedly possible for a userland process to cause the kernel to halt. This may be due to a bad system call. / /...

BSDi 3.0 inc - Local Buffer Overflow Local Privilege Escalation

BSDi 3.0 inc - Local Buffer Overflow Local Privilege Escalation / BSDiincmh buffer overflow, by [email protected]. this is will give you euid=0root on BSDi/3.0 systems. / define PATH "/usr/contrib/mh/bin/inc" / path to inc on BSDi/3.0 / define BUFFER 2048 / no need to change this. / define...

BSDi 3.0 inc Local Root Buffer Overflow Exploit

Exploit for bsd platform in category local exploits =============================================== BSDi 3.0 inc Local Root Buffer Overflow Exploit =============================================== / BSDiincmh buffer overflow, by v9email protected. this is will give you euid=0root on BSDi/3.0...

BSDi 3.0 inc - Local Buffer Overflow / Local Privilege Escalation

/ BSDiincmh buffer overflow, by [email protected]. this is will give you euid=0root on BSDi/3.0 systems. / define PATH "/usr/contrib/mh/bin/inc" / path to inc on BSDi/3.0 / define BUFFER 2048 / no need to change this. / define DEFAULTOFFSET -7000 / generalized offset. / static char exec=...

BSDi 3.0/4.0 rcvtty gid=tty exploit... (mh package)

well, i dont know if rcvtty is suppost to be setgid in general, since ive never seen it setgid on anything but BSDi 3.0 and 4.0. but none-the-less, here is a exploit i wrote for it: original ver: http://realhalo.org/xrcvtty.c xrcvtty.cmodified from original: ---------------------------------- /...