334 matches found
FreeBSD jail escape
It's possible to access current working directory...
FreeBSD-SA-10:04.jail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:04.jail Security Advisory The FreeBSD Project Topic: Insufficient environment sanitization in jail8 Category: core Module: jail Announced: 2010-05-27 Credits:...
FreeBSD -- Insufficient environment sanitization in jail(8)
Problem Description: The jail8 utility does not change the current working directory while imprisoning. The current working directory can be accessed by its descendants...
Scientology DDoS Attacker Gets Jail
A second US man has been jailed over controversial denial of service attacks against the Church of Scientology two years ago. Read the full article. The Register...
Scientology Hacker Headed to Jail
A Nebraska man agreed today to plead guilty to participating in an attack on Church of Scientology websites in January 2008 that shut down the group’s websites. Read the full article. Help Net Security...
FreeBSD 6.4 pipeclose()/knlist_cleardel() race condition exploit
No description provided by source. if 0 FreeBSD 6.4 and below are vulnerable to race condition between pipeclose and knlistcleardel resulting in NULL pointer dereference. The following code exploits vulnerability to run code in kernel mode, giving root shell and escaping from jail. endif /...
FreeBSD 6.4 pipeclose()/knlist_cleardel() race condition exploit
FreeBSD 6.4 and below are vulnerable to race condition between pipeclose and knlistcleardel resulting in NULL pointer dereference. The following code exploits vulnerability to run code in kernel mode, giving root shell and escaping from jail. http://www.frasunek.com/pipe.txt The bug was fixed a...
FreeBSD 6.4 pipeclose()/knlist_cleardel() race condition exploit
Exploit for unknown platform in category local exploits ================================================================ FreeBSD 6.4 pipeclose/knlistcleardel race condition exploit ================================================================ Title: FreeBSD 6.4 pipeclose/knlistcleardel race...
FreeBSD 6.4 - 'pipeclose()'/'knlist_cleardel()' Race Condition
if 0 FreeBSD 6.4 and below are vulnerable to race condition between pipeclose and knlistcleardel resulting in NULL pointer dereference. The following code exploits vulnerability to run code in kernel mode, giving root shell and escaping from jail. endif / 29.08.2009, babcia padlina FreeBSD includ...
Gentoo Security Advisory GLSA 200907-10 (syslog-ng)
The remote host is missing updates announced in advisory GLSA 200907-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
NcFTPd <= 2.8.5 Remote Jail Breakout Vulnerability
No description provided by source. NcFTPd = 2.8.5 remote jail breakout Discovered by: Kingcope Contact: kcope2atgooglemail.com / http://isowarez.de Date: 27th July 2009 Greetings: Alex,Andi,Adize,wY!,Netspy,Revoguard Prerequisites: Valid user account. Demonstration on FreeBSD 7.0-RELEASE and NcFT...
NcFTPD 2.8.5 Jail Breakout
NcFTPd googlemail.com / http://isowarez.de Date: 27th July 2009 Greetings: Alex,Andi,Adize,wY!,Netspy,Revoguard Prerequisites: Valid user account. Demonstration on FreeBSD 7.0-RELEASE and NcFTPd 2.8.5 latest version: ftp 192.168.2.5 Connected to 192.168.2.5. 220 localhost NcFTPd Server unregister...
NcFTPd 2.8.5 - Remote Jail Breakout
NcFTPd 2.8.5 - Remote Jail Breakout NcFTPd googlemail.com / http://isowarez.de Date: 27th July 2009 Greetings: Alex,Andi,Adize,wY!,Netspy,Revoguard Prerequisites: Valid user account. Demonstration on FreeBSD 7.0-RELEASE and NcFTPd 2.8.5 latest version: ftp 192.168.2.5 Connected to 192.168.2.5. 22...
NcFTPd 2.8.5 - Remote Jail Breakout
NcFTPd googlemail.com / http://isowarez.de Date: 27th July 2009 Greetings: Alex,Andi,Adize,wY!,Netspy,Revoguard Prerequisites: Valid user account. Demonstration on FreeBSD 7.0-RELEASE and NcFTPd 2.8.5 latest version: ftp 192.168.2.5 Connected to 192.168.2.5. 220 localhost NcFTPd Server unregister...
NcFTPd <= 2.8.5 Remote Jail Breakout Vulnerability
Exploit for freebsd platform in category remote exploits ================================================== NcFTPd get /etc/passwd passwd local: passwd remote: /etc/passwd 502 Unimplemented command. 227 Entering Passive Mode 192,168,2,5,219,171 550 No such file. ftp ls .. 227 Entering Passive Mod...
NcFTPd <= 2.8.5 remote jail breakout
NcFTPd = 2.8.5 remote jail breakout Discovered by: Kingcope Contact: kcope2atgooglemail.com / http://isowarez.de Date: 27th July 2009 Greetings: Alex,Andi,Adize,wY!,Netspy,Revoguard Prerequisites: Valid user account. Demonstration on FreeBSD 7.0-RELEASE and NcFTPd 2.8.5 latest version: ftp...
Syslog-ng: Chroot escape
Background Syslog-ng is a flexible and scalable system logger. Description Florian Grandel reported that Syslog-ng does not call chdir before chroot which leads to an inherited file descriptor to the current working directory. Impact A local attacker might exploit a separate vulnerability in...
FreeBSD -- netgraph / bluetooth privilege escalation
Problem Description: Some function pointers for netgraph and bluetooth sockets are not properly initialized. Impact: A local user can cause the FreeBSD kernel to execute arbitrary code. This could be used by an attacker directly; or it could be used to gain root privilege or to escape from a jail...
CVE-2008-5110
syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9...
CVE-2008-5110
syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9...