1826 matches found
linux/x86 - /sbin/ipchains -F 40 bytes
linux/x86 /sbin/ipchains -F 40 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word...
eIQNetworks Enterprise Security Analyzer Monitoring.exe多个缓冲区溢出漏洞
eIQnetworks Enterprise Security Analyzer（ESA）是一款企业级的安全管理平台。 ESA的Monitoring.exe进程中存在两个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 第一个漏洞存在于Monitoring.exe中负责处理TCP 9999端口上用户数据的例程中。如果连接到这个端口，用户就会立即被提示输入口令。这时可以发送HELP命令获得各种命令帮助： --------------------------------------------------------- Usage: QUERYMONITOR: to fetc...
DEBIAN-CVE-2005-3150
Format string vulnerability in the LogFlush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames...
PT-2005-4086 · Linux +1 · Linux +1
Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.6.13 Linux versions prior to 2.4.32-pre2 Description: A race condition in the ip vs conn flush function allows local users to cause a denial of service by exploiting a null dereference. This occurs when a connection...
CVE-2005-2531
OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial o...
openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients
James Yonan reports: If the client sends a packet which fails to decrypt on the server, the OpenSSL error queue is not properly flushed, which can result in another unrelated client instance on the server seeing the error and responding to it, resulting in disconnection of the unrelated client...
Debian DSA-453-1 : linux-kernel-2.2.20-i386+m68k+powerpc - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-454-1 : linux-kernel-2.2.22-alpha - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-456-1 : linux-kernel-2.2.19-arm - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
linux/x86 - iptables -F 45 bytes
linux/x86 iptables -F 45 bytes. Shellcode exploit for linx86 platform / 06/03/2003 45 bytes to flush iptables. execve/sbin/iptables -F by UnboundeD greetz to s0t4ipv6. / char shellcode = "\x31\xd2" // xorl %edx,%edx "\x52" // pushl %edx "\x66\x68\x2d\x46" // pushw $0x462d "\x89\xe6" // movl...
linux/x86 iptables -F 45 bytes
Exploit for linux/x86 platform in category shellcode ============================== linux/x86 iptables -F 45 bytes ============================== / 06/03/2003 45 bytes to flush iptables. execve/sbin/iptables -F by UnboundeD greetz to s0t4ipv6. / char shellcode = "\x31\xd2" // xorl %edx,%edx "\x52...
linux/x86 - iptables -F 58 bytes
linux/x86 iptables -F 58 bytes. Shellcode exploit for linx86 platform / The shellcode flushs the iptables by running /sbin/iptables -F no exit greetz to zilion: man, my code is shorter! size = 58 bytes OS = Linux i386 written by /rootteam/dev0id www.sysworld.net BITS 32 jmp short callme main: pop...
linux/x86 iptables -F 58 bytes
No description provided by source. / The shellcode flushs the iptables by running /sbin/iptables -F no exit greetz to zilion: man, my code is shorter! size = 58 bytes OS = Linux i386 written by /rootteam/dev0id www.sysworld.net BITS 32 jmp short callme main: pop esi xor eax,eax mov byte esi+14,al...
linux/x86 iptables -F 58 bytes
Exploit for linux/x86 platform in category shellcode ============================== linux/x86 iptables -F 58 bytes ============================== / The shellcode flushs the iptables by running /sbin/iptables -F no exit greetz to zilion: man, my code is shorter! size = 58 bytes OS = Linux i386...
linux/x86 iptables -F 45 bytes
No description provided by source. / 06/03/2003 45 bytes to flush iptables. execve/sbin/iptables -F by UnboundeD greetz to s0t4ipv6. / char shellcode = "\x31\xd2" // xorl %edx,%edx "\x52" // pushl %edx "\x66\x68\x2d\x46" // pushw $0x462d "\x89\xe6" // movl %esp,%esi "\x52" // pushl %edx...
[SECURITY] [DSA 514-1] New Linux 2.2.20 packages fix local root exploit (sparc)
-------------------------------------------------------------------------- Debian Security Advisory DSA 514-1 [email protected] http://www.debian.org/security/ Martin Schulze June 4th, 2004 http://www.debian.org/security/faq -...
DSA-514 kernel-image-sparc-2.2 - failing function and TLB flush
Bulletin has no description...
[SECURITY] [DSA 466-1] New Linux 2.2.10 packages fix local root exploit (powerpc/apus)
-------------------------------------------------------------------------- Debian Security Advisory DSA 466-1 [email protected] http://www.debian.org/security/ Martin Schulze March 18th, 2004 http://www.debian.org/security/faq -...