Linux x86 - execve("/bin/bash","-p",NULL) - 33 bytes

No description provided by source. / Title: Linux x86 - execve/bin/bash, /bin/bash, -p, NULL - 33 bytes Author: Jonathan Salwan Mail: [email protected] Web: http://www.shell-storm.org !Database of Shellcodes http://www.shell-storm.org/shellcode/ sh sets euid, egid to uid, gid if -p not...

BSDi 3.0 / 4.0 rcvtty[mh] Local Exploit

No description provided by source. / BSDi3.0/4.0rcvttymh local exploit, by [email protected]. this exploit is for the rcvtty of the mh package, which is setgid=4tty on BSDi. this exploit gives you egid/group=4tty access. example: ------------------------------------------------- bash-2.02$ id...

Redhat 6.1 man Local Exploit (egid 15)

No description provided by source. !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b"...

HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation

/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...

SCO OpenServer authsh / backupsh buffer overflow

Buffer overflow in /usr/lib/sysadm/authsh, /usr/lib/sysadm/backupsh allow to gain egid backup...

Urban game buffer overflow

Bufer overflow during environment variables parsing allow to obtain egid games...

Buffer overflow in zblast

Local overflow gives egid games...

Проблема с dump в NetBSD (privelege escalation)

При вызове внешней программы указанной пользователем не сбрасывается egid tty...

Переполнение буфера в rxvt, xvt (buffer overflow)

Переполненеи буфера дает egid utmp...

Проблема символьных линков в LPRng + TeTeX (symbolic link)

Проблема символьных лдинков дает возможность получить euid/egid lp...

Дырка в mailx под Solaris (buffer overflow)

Переполнение буфера в ключике -F egid mail...

Дырка в bubblemon (egid kmem)

Не сбрасывается egid kmem при вызове внешнего приложения...

Redhat 6.1 man Local Exploit (egid 15)

Exploit for linux platform in category local exploits ====================================== Redhat 6.1 man Local Exploit egid 15 ====================================== !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - email protected $shellcode =...

Дырка в write в Solaris

Переполнение буфера в аргументе командной строки дает возможность получить egid tty...

vulnerability in Connection Manager Control binary in Oracle 8.1.5 Linux Platform.

Hello Elias Colud you make public this advisory. Oracle people dont send an answer in 6 days. Please cut this lines. Thanks WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in cmctl in Oracle 8.1.5 Date: 13-11-2000 Platform: Only tested in Linux, but can be exported to others...

Локальная дырка в Oracle 8 (cmctl buffer overflow)

Переполнение буфера в cmctl позволяет получить euid=oracle и egid=dba...