79 matches found
Дырка в mh (rcvtty) под BSDi
rcvtty позволяет выполнение скрипта...
BSDi SUIDPerl - Local Stack Buffer Overflow
BSDi SUIDPerl - Local Stack Buffer Overflow / BSDisuidperl buffer overflow, by [email protected]. this is that old buffer overflow in suidperl, but i never saw any version of it for BSDi. so, here it is. this gives euid=0. BSDi/3.0 / define PATH "/usr/bin/suidperl" / path to suidperl on BSDi/3.0....
BSDi suidperl Local Stack Buffer Overflow Exploit
Exploit for bsd platform in category local exploits ================================================= BSDi suidperl Local Stack Buffer Overflow Exploit ================================================= / BSDisuidperl buffer overflow, by v9email protected. this is that old buffer overflow in...
BSDi 3.04.0 - rcvtty[mh] Local Privilege Escalation
BSDi 3.04.0 - rcvttymh Local Privilege Escalation / BSDi3.0/4.0rcvttymh local exploit, by [email protected]. this exploit is for the rcvtty of the mh package, which is setgid=4tty on BSDi. this exploit gives you egid/group=4tty access. example: -------------------------------------------------...
BSDi 3.0 / 4.0 rcvtty[mh] Local Exploit
Exploit for bsd platform in category local exploits ======================================= BSDi 3.0 / 4.0 rcvttymh Local Exploit ======================================= / BSDi3.0/4.0rcvttymh local exploit, by v9email protected. this exploit is for the rcvtty of the mh package, which is setgid=4t...
BSDi 3.0/4.0 - 'rcvtty[mh]' Local Privilege Escalation
/ BSDi3.0/4.0rcvttymh local exploit, by [email protected]. this exploit is for the rcvtty of the mh package, which is setgid=4tty on BSDi. this exploit gives you egid/group=4tty access. example: ------------------------------------------------- bash-2.02$ id uid=101v9 gid=100user groups=100user...
BSDi SUIDPerl - Local Stack Buffer Overflow
/ BSDisuidperl buffer overflow, by [email protected]. this is that old buffer overflow in suidperl, but i never saw any version of it for BSDi. so, here it is. this gives euid=0. BSDi/3.0 / define PATH "/usr/bin/suidperl" / path to suidperl on BSDi/3.0. / define DEFAULTOFFSET -5000 / general...
CVE-1999-0747
Denial of service in BSDi Symmetric Multiprocessing SMP when an fstat call is made when the system has a high CPU load...
CVE-1999-0747
CVE-1999-0747 describes a denial-of-service in BSDi Symmetric Multiprocessing (SMP) triggered when an fstat() call is issued under very high CPU load. The available documents identify the affected context (SMP BSDi) and the vulnerable operation (fstat), but they do not provide concrete details on...
CVE-1999-0955
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command...
CVE-1999-0955
CVE-1999-0955 describes a race condition in wu-ftpd and BSDI ftpd that allows remote attackers to gain root access via the SITE EXEC command. Affected software includes wu-ftpd and BSDI ftpd; the underlying issue is a race in handling SITE EXEC. The vulnerability is remote-exploit via FTP, leadin...
CVE-1999-0703
CVSS shows low impact with local access. The CVE notes that OpenBSD, BSDI, and other Unix systems allow users to set chflags and fchflags on character and block devices. Connected records corroborate this behavior; however, the underlying root cause, affected versions, and remediation are not det...
CVE-1999-1047
When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities...
Gauntlet_Firewall_Lockup.txt
Subject: Remotely Lock Up Gauntlet 5.0 To: [email protected] / Discovered and written by: - Reply to Network Associates: "Who's watching your network?" MSG.net "Who's watching the watchers?" This can be found online at http://www.msg.net/firewalls/tis/bland.c Description: If you know an I...
CVE-1999-0747
Denial of service in BSDi Symmetric Multiprocessing SMP when an fstat call is made when the system has a high CPU load...
CVE-1999-0703
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...
BSDI BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4 x86 OpenBSD 2.5 - UFS Secure Level 1
BSDI BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4 x86 OpenBSD 2.5 - UFS Secure Level 1 source: https://www.securityfocus.com/bid/510/info In 4.4BSD derivatives there are four secure levels that provide for added filesystem security among other things over and above the regular unix permission systems. Part o...
BSDI 4.0 tcpmux inetd - Crash
BSDI 4.0 tcpmux inetd - Crash source: https://www.securityfocus.com/bid/66/info A vulnerability exists in inetd which allows a remote user to crash inetd if the tcpmux service is not commented out of /etc/inetd.conf. The tcpmux service is defined in RFC1078 $ nmap -p 1-64000 -i It is also claimed...