Apple Mac OSX 10.3.x - Multiple Vulnerabilities

Apple Mac OSX 10.3.x - Multiple Vulnerabilities // source: https://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain...

Frank McIngvale LuxMan 0.41 - Local Buffer Overflow

Frank McIngvale LuxMan 0.41 - Local Buffer Overflow !/usr/bin/perl -w luxman exploit ii luxman 0.41-19.1 Pac-Man clone svgalib based Tested with "security compat" set in /etc/vga/libvga.config on debian unstable 3.1 kfinisterre@jdam:$ ./luxmanex.pl LuxMan v0.41, Copyright c 1995 Frank McIngvale...

RealNetworks RealPlayer 10 - .smil Local Buffer Overflow

RealNetworks RealPlayer 10 - .smil Local Buffer Overflow / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in...

[Full-Disclosure] iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability

IBM AIX netpmon Local Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.10.05 www.idefense.com/application/poi/display?id=197&type=vulnerabilities February 10, 2005 I. BACKGROUND The netpmon program is a setuid root application, installed by default under multiple versions of IBM AIX,...

Funduc Search and Replace - Compressed File Local Buffer Overflow

/ Search and Replace Compressed File search Local Buffer Overflow Exploit Discoveried & Coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail: [email protected] Greetings to: Tarako / / Search and Replace 5.0 and prior versions are...

Funduc Search and Replace Compressed File Local BoF Exploit

Exploit for unknown platform in category local exploits =========================================================== Funduc Search and Replace Compressed File Local BoF Exploit =========================================================== / Search and Replace Compressed File search Local Buffer...

Funduc Search and Replace - Compressed File Local Buffer Overflow

Funduc Search and Replace - Compressed File Local Buffer Overflow / Search and Replace Compressed File search Local Buffer Overflow Exploit Discoveried & Coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail: [email protected] Greetings t...

Funduc Search and Replace Compressed File Local BoF Exploit

No description provided by source. / Search and Replace Compressed File search Local Buffer Overflow Exploit Discoveried & Coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail: [email protected] Greetings to: Tarako / / Search and Replac...

Apple iTunes - Playlist Parsing Local Buffer Overflow

Apple iTunes - Playlist Parsing Local Buffer Overflow / PoC for iTunes on OS X 10.3.7 - [email protected] - Generates a .pls file, when loaded in iTunes it binds a shell to port 4444. Shellcode contains no \x00 or \x0a's. sample output: -nemo@gir:$ ./fm-eyetewnz foo.pls - fm-eyetewnz - -...

Exim 4.41 - 'dns_build_reverse' Local Buffer Overflow

/ This proof-of-concept demonstrates the existence of the vulnerability reported by iDEFENSE iDEFENSE Security Advisory 01.14.05. It has been tested against exim-4.41 under Debian GNU/Linux. Note that setuid is not included in the shellcode to avoid script-kidding. My RET is 0xbffffae4, but fb.pl...

Ultrix 4.5/MIPS - dxterm 0 Local Buffer Overflow

/ Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' in the shellcode. Probably dxterm only copies everything after the last slash, as it expects a path. Since everything is pretty much hardcoded, you will probably have to tweak it for versions...

Ultrix 4.5MIPS - dxterm 0 Local Buffer Overflow

Ultrix 4.5MIPS - dxterm 0 Local Buffer Overflow / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' in the shellcode. Probably dxterm only copies everything after the last slash, as it expects a path. Since everything is pretty much hardcoded, yo...

XFree86 4.3 - Font Information File Buffer Overflow

XFree86 4.3 - Font Information File Buffer Overflow // source: https://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file...

libxml 2.6.12 nanoftp - Local Buffer Overflow

libxml 2.6.12 nanoftp - Local Buffer Overflow / libxml 2.6.12 nanoftp bof POC infamous42mdAThotpopDOTcom n00b localho outernet gcc -Wall libsuxml.c -lxml2 n00b localho outernet ./a.out Usage: ./a.out align n00b localho outernet netstat -ant | grep 7000 n00b localho outernet ./a.out 0xbfff0360...

libxml 2.6.12 nanoftp - Local Buffer Overflow

/ libxml 2.6.12 nanoftp bof POC infamous42mdAThotpopDOTcom n00b localho outernet gcc -Wall libsuxml.c -lxml2 n00b localho outernet ./a.out Usage: ./a.out align n00b localho outernet netstat -ant | grep 7000 n00b localho outernet ./a.out 0xbfff0360 xmlNanoFTPScanURL: Use IPv6/IPv4 format n00b...

Apache 1.3.31 mod_include - Local Buffer Overflow

/ local exploit for modinclude of apache 1.3.x written by xCrZx /18.10.2004/ bug found by xCrZx /18.10.2004/ Successfully tested on apache 1.3.31 under Linux RH9.0Shrike / / Technical Details: there is an overflow in gettag function: static char gettagpool p, FILE in, char tag, int tagbuflen, int...

Apache 1.3.31 mod_include - Local Buffer Overflow

Apache 1.3.31 modinclude - Local Buffer Overflow / local exploit for modinclude of apache 1.3.x written by xCrZx /18.10.2004/ bug found by xCrZx /18.10.2004/ Successfully tested on apache 1.3.31 under Linux RH9.0Shrike / / Technical Details: there is an overflow in gettag function: static char...

Apache 1.3.x mod_include - Local Buffer Overflow

Apache 1.3.x modinclude - Local Buffer Overflow // source: https://www.securityfocus.com/bid/11471/info The problem presents itself when the affected module attempts to parse modinclude-specific tag values. A failure to properly validate the lengths of user-supplied tag strings before copying the...

Apache 1.3.x mod_include - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/11471/info The problem presents itself when the affected module attempts to parse modinclude-specific tag values. A failure to properly validate the lengths of user-supplied tag strings before copying them into finite buffers facilitates the overflow. ...

Monolith Games Local Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ============================================ Monolith Games Local Buffer Overflow Exploit ============================================ / by Luigi Auriemma / include include include include ifdef WIN32 include include "winerr.h" define close...