MySQL (Linux) - Stack Buffer Overrun (PoC)

!/usr/bin/perl =for comment MySQL Server exploitable stack based overrun Ver 5.5.19-log for Linux and below tested with Ver 5.1.53-log for suse-linux-gnu too unprivileged user any account anonymous account?, post auth as illustrated below the instruction pointer is overwritten with 0x41414141 bug...

Fedora Update for insight FEDORA-2012-18300

Check for the Version of insight OpenVAS Vulnerability Test Fedora Update for insight FEDORA-2012-18300 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for insight FEDORA-2012-18311

Check for the Version of insight OpenVAS Vulnerability Test Fedora Update for insight FEDORA-2012-18311 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: insight-7.4.50-4.20120403cvs.fc17

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for GDB version 6.x...

[SECURITY] Fedora 16 Update: insight-7.4.50-4.20120403cvs.fc16

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for GDB version 6.x...

[SECURITY] Fedora 18 Update: insight-7.4.50-4.20120403cvs.fc18

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for GDB version 6.x...

Fedora Update for gdb FEDORA-2012-6635

Check for the Version of gdb OpenVAS Vulnerability Test Fedora Update for gdb FEDORA-2012-6635 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for gdb FEDORA-2012-6635

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for gdb FEDORA-2012-6614

Check for the Version of gdb OpenVAS Vulnerability Test Fedora Update for gdb FEDORA-2012-6614 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for gdb FEDORA-2012-6614

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : gdb-7.3.50.20110722-16.fc16 (2012-6614)

Update 'set auto-load' patchset and the --with-auto-load-safe-path setting. Security fix for loading untrusted inferiors, see 'set auto-load'. Security fix for loading untrusted inferiors, see 'set auto-load'. Workaround crashes from stale frameinfo pointer BZ 804256. Security fix for loading...

[SECURITY] Fedora 16 Update: gdb-7.3.50.20110722-16.fc16

GDB, the GNU debugger, allows you to debug programs written in C, C++, Java, and other languages, by executing them in a controlled fashion and printing their data...

Scientific Linux Security Update : gdb on SL4 i386/x86_64

Various buffer overflows and underflows were found in the DWARF expression computation stack in GDB. If a user loaded an executable containing malicious debugging information into GDB, an attacker might be able to execute arbitrary code with the privileges of the user. CVE-2006-4146 %NASLMINLEVEL...

Scientific Linux Security Update : gdb on SL3.x i386/x86_64

Various buffer overflows and underflows were found in the DWARF expression computation stack in GDB. If an attacker could trick a user into loading an executable containing malicious debugging information into GDB, they may be able to execute arbitrary code with the privileges of the user...

Fedora 17 : gdb-7.4.50.20120120-42.fc17 (2012-6635)

Update 'set auto-load' patchset and the --with-auto-load-safe-path setting. Security fix for loading untrusted inferiors, see 'set auto-load'. Security fix for loading untrusted inferiors, see 'set auto-load'. Workaround crashes from stale frameinfo pointer BZ 804256. Security fix for loading...

Разработка эксплоитов для Linux. Часть 4 – обход ASCII armor и возврат в plt

Автор: sickness Блог автора: Перевод: Gh0St 07.04.2012 Разработка эксплоитов для Linux. Часть 4 – обход ASCII armor и возврат в plt. ПРИМЕЧАНИЕ: Перед чтением данного документа, рекомендуется ознакомиться со следующими работами: Руководство по написанию эксплоитов для Linux. Часть I – переполнени...

Nagios Plugins check_ups - Local Buffer Overflow (PoC)

Advisory: Nagios Plugin 'checkups' local buffer overflow Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on nagios-plugins-1.4.15 Vendor URL: http://nagiosplugins.org/ ./checkups -u perl -e 'print "A"x16407' buffer overflow detected : ./checkups...

Linux GNU Debugger "debug_gdb_scripts"加载任意代码执行漏洞

BUGTRAQ ID: 50829 CVE ID: CVE-2011-4355 Linux是自由电脑操作系统内核,Linux所带的GNU Debugger gdb工具实现上存在漏洞，在定义了.debuggdbscripts后，gdb会从当前目录加载可疑文件，造成以当前用户权限执行任意代码。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kernel.org/...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...

GNU inetutils 1.8-1 FTP Client Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: GNU inetutils 1.8-1 ftp client Heap Overflow Date: Dec 07 2010 Author: Rew Software Link: http://ftp.gnu.org/gnu/inetutils/inetutils-1.8.tar.gz Version: 1.8-1 Tested on: Arch Linux up to date CVE: NA 0day...