ProFTPd 1.2.7 < 1.2.9rc2 - Remote Code Execution / Brute Force

/ ProFTPd 1.2.7 - 1.2.9rc2 remote r00t exploit -------------------------------------------- By Haggis This exploit builds on the work of bkbll to create a working, brute-force remote exploit for the \n procesing bug in ProFTPd. Tested on SuSE 8.0, 8.1 and RedHat 7.2/8.0 it works quite well... the...

SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw

Imap-uw allows user to access any file he could access locally. It's not a bug it's insecurity by design. According to vendor's web FAQ it's not pointed in FAQ inside program distribution: -=-=-=-=-=-=- 5.1 I see that the IMAP server allows access to arbitary files on the system, including...

CVE-2002-0244

Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. dot dot in the pathname argument to chdir...

CVE-2002-0244

Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. dot dot in the pathname argument to chdir...

CVE-2002-0244

The CVE-2002-0244 entry concerns a directory traversal vulnerability in the chroot function of the AtheOS 0.3.7 environment, where an attacker can escape jail confines via a .. segment in the pathname passed to chdir. Affected software: AtheOS 0.3.7. Root cause: improper handling of relative path...

CVE-1999-1194

chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges...

CVE-1999-1194

Technical details (affected products, versions, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates.

Обхот chroot() в AtheOS (protection bypass)

С помощью обратного пути можно обратиться к файлам за пределами chroot...

AtheOS: escaping from a chroot jail

------- AtheOS ------- AtheOS is a free desktop operating system under the GPL license. AtheOS currently run on Intel, AMD and other compatible processors and support the Intel Multi Processor architecture. AtheOS home page is : http://www.atheos.cx ------- Vulnerability ------- A chroot call is...

CVE-2001-0892

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

CVE-1999-1378

dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files...

CVE-2000-1144

Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment...

CVE-2000-1144

CVE-2000-1144 affects Recourse ManTrap 1.6. The issue is that the chroot'ed root (/) has an inode number higher than normal, enabling an attacker to determine that the process is running inside a chroot environment. The available sources describe the vulnerability as exposing chroot presence (loc...

linux chroot/execve code

linux chroot/execve code. Shellcode exploit for linx86 platform / This is Linux chroot/execve code.It is 80 bytes long.I have some ideas how to make it smaller, but till then use this one. signed predator linux registered user : 181116 preedatoratsendmaildotru / char...

linux chroot()/execve() code

Exploit for linux/x86 platform in category shellcode ============================ linux chroot/execve code ============================ / This is Linux chroot/execve code.It is 80 bytes long.I have some ideas how to make it smaller, but till then use this one. signed predator linux registered use...

CVE-2000-1144

Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment...

Vulnerability in Winsock FTPD 2.41/3.00 (Pro)

Overdrive Advisory 1 --------------------------- Synopsis Subject : Vulnerability in Winsock ftpd Application : Winsock FTPd v2.41 RC14, Winsock FTPd v2.41 Pro, Winsock FTPd v3.00 Pro Platform : Win32 Description : a local user can break the chroot jail Date : 11/28/2000 Author : Interstellar...

ManTrap 1.6.1 - Root Directory Inode Disclosure

ManTrap 1.6.1 - Root Directory Inode Disclosure / source: https://www.securityfocus.com/bid/1909/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real ...

ManTrap 1.6.1 - Hidden Process Disclosure

// source: https://www.securityfocus.com/bid/1908/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real to an attacker who gains access to it. To ensur...

ManTrap 1.6.1 - Root Directory Inode Disclosure

/ source: https://www.securityfocus.com/bid/1909/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real to an attacker who gains access to it. Chroot...