Ultrix 4.5MIPS - dxterm 0 Local Buffer Overflow

Ultrix 4.5MIPS - dxterm 0 Local Buffer Overflow / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' in the shellcode. Probably dxterm only copies everything after the last slash, as it expects a path. Since everything is pretty much hardcoded, yo...

XFree86 4.3 - Font Information File Buffer Overflow

XFree86 4.3 - Font Information File Buffer Overflow // source: https://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file...

libxml 2.6.12 nanoftp - Local Buffer Overflow

libxml 2.6.12 nanoftp - Local Buffer Overflow / libxml 2.6.12 nanoftp bof POC infamous42mdAThotpopDOTcom n00b localho outernet gcc -Wall libsuxml.c -lxml2 n00b localho outernet ./a.out Usage: ./a.out align n00b localho outernet netstat -ant | grep 7000 n00b localho outernet ./a.out 0xbfff0360...

libxml 2.6.12 nanoftp - Local Buffer Overflow

/ libxml 2.6.12 nanoftp bof POC infamous42mdAThotpopDOTcom n00b localho outernet gcc -Wall libsuxml.c -lxml2 n00b localho outernet ./a.out Usage: ./a.out align n00b localho outernet netstat -ant | grep 7000 n00b localho outernet ./a.out 0xbfff0360 xmlNanoFTPScanURL: Use IPv6/IPv4 format n00b...

Apache 1.3.31 mod_include - Local Buffer Overflow

/ local exploit for modinclude of apache 1.3.x written by xCrZx /18.10.2004/ bug found by xCrZx /18.10.2004/ Successfully tested on apache 1.3.31 under Linux RH9.0Shrike / / Technical Details: there is an overflow in gettag function: static char gettagpool p, FILE in, char tag, int tagbuflen, int...

Apache 1.3.31 mod_include - Local Buffer Overflow

Apache 1.3.31 modinclude - Local Buffer Overflow / local exploit for modinclude of apache 1.3.x written by xCrZx /18.10.2004/ bug found by xCrZx /18.10.2004/ Successfully tested on apache 1.3.31 under Linux RH9.0Shrike / / Technical Details: there is an overflow in gettag function: static char...

Apache 1.3.x mod_include - Local Buffer Overflow

Apache 1.3.x modinclude - Local Buffer Overflow // source: https://www.securityfocus.com/bid/11471/info The problem presents itself when the affected module attempts to parse modinclude-specific tag values. A failure to properly validate the lengths of user-supplied tag strings before copying the...

Apache 1.3.x mod_include - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/11471/info The problem presents itself when the affected module attempts to parse modinclude-specific tag values. A failure to properly validate the lengths of user-supplied tag strings before copying them into finite buffers facilitates the overflow. ...

Monolith Games Local Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ============================================ Monolith Games Local Buffer Overflow Exploit ============================================ / by Luigi Auriemma / include include include include ifdef WIN32 include include "winerr.h" define close...

Monolith Games - Local Buffer Overflow (PoC)

/ by Luigi Auriemma / include include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1.1" define PORT 27888 define TIMEOUT 3 define BUFFSZ 2048 define PCK...

WinRAR 1.0 - Local Buffer Overflow

/ WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright © 2004 ProGroup Software, Inc. E-Mail:[email protected] Web:www.prohack.net Usage:\r\nexploit Targets: 1 - WinXP SP1 user32.dll 0x77D718FC 2 - WinXP SP2 user32.dll 0x77D8AF0A Example:exploit 1 myrar.rar / / All WinRar 2.x seri...

WinRAR 1.0 - Local Buffer Overflow

WinRAR 1.0 - Local Buffer Overflow / WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright © 2004 ProGroup Software, Inc. E-Mail:[email protected] Web:www.prohack.net Usage:\r\nexploit Targets: 1 - WinXP SP1 user32.dll 0x77D718FC 2 - WinXP SP2 user32.dll 0x77D8AF0A Example:exploit ...

WinRAR 1.0 Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================== WinRAR 1.0 Local Buffer Overflow Exploit ======================================== / WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright ? 2004 ProGroup Software, Inc...

SUSE-SA:2004:032: apache2

The remote host is missing the patch for the advisory SUSE-SA:2004:032 apache2. The Apache daemon is running on most of the web-servers used in the Internet today. The Red Hat ASF Security-Team and the Swedish IT Incident Center within the National Post and Telecom Agency SITIC have found a bug i...

LibPNG 1.2.5 - png_jmpbuf() Local Buffer Overflow

LibPNG 1.2.5 - pngjmpbuf Local Buffer Overflow include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not...

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

source: https://www.securityfocus.com/bid/10915/info It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from the firewall.ini file included with the software. It is reported that when the system is...

SoX - Local Buffer Overflow

SoX - Local Buffer Overflow POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp"...

Microsoft Windows NT 4.02000 - POSIX Subsystem Local Buffer Overflow Local Privilege Escalation (MS04-020)

Microsoft Windows NT 4.02000 - POSIX Subsystem Local Buffer Overflow Local Privilege Escalation MS04-020 // source: https://www.securityfocus.com/bid/10710/info The Microsoft POSIX subsystem implementation is prone to a local buffer overflow vulnerability. A local attacker may exploit this...

Microsoft Windows POSIX Subsystem Buffer Overflow Local Privilege Escalation Vulnerability

Description The Microsoft POSIX subsystem implementation is prone to a local buffer overflow vulnerability. A local attacker may exploit this vulnerability in order to run code with elevated privileges, fully compromising the vulnerable computer. Technologies Affected Avaya S3400 Message...

Veritas NetBackup 3.5/4.5/5.0 - Multiple Local Memory Corruption Vulnerabilities (2)

source: https://www.securityfocus.com/bid/10226/info Multiple unspecified local buffer overrun and format string vulnerabilities have been reported to exist in various setuid Veritas NetBackup binaries. These issues may be exploited to execute arbitrary code with root privileges. It should be not...