openbsd/x86 portbind port 6969 148 bytes

Exploit for openbsd/x86 platform in category shellcode ======================================== openbsd/x86 portbind port 6969 148 bytes ======================================== / shell on port 6969/tcp shellcode for OpenBSD by noir / include long shellcode=...

bsd/x86 portbind port random 143 bytes

Exploit for bsd/x86 platform in category shellcode ====================================== bsd/x86 portbind port random 143 bytes ====================================== Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / 143...

openbsd/x86 portbind port 6969 148 bytes

No description provided by source. / shell on port 6969/tcp shellcode for OpenBSD by noir / include stdio.h long shellcode= 0x4151c931,0x51514151,0x61b0c031,0x078980cd, 0x4f88c931,0x0547c604,0x084f8902,0x0647c766, 0x106a391b,0x5004478d,0x5050078b,0x68b0c031,...

bsd/x86 break chroot 45 bytes

No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 45 bytes. -break chrooted / char shellcode= "\x68\x62\x2e\x2e\x2e" / pushl $0x2e2e2e62 / "\x89\xe7" / movl %esp,%edi / "\x33\xc0" / xorl %eax,%eax / "\x88\x47\x03" / movb %al,0x3%edi / "\x57" /...

bsd/x86 - execve /bin/sh ENCRYPT* 57 bytes

bsd/x86 execve /bin/sh ENCRYPT 57 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 57 bytes. -Encriptado execve/bin/sh; Para mas informacion ver http://www.shellcode.com.ar/es/proyectos.html / char shellcode=...

bsd/x86 execve /bin/sh setuid (0) 29 bytes

Exploit for bsd/x86 platform in category shellcode ========================================== bsd/x86 execve /bin/sh setuid 0 29 bytes ========================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0...

CVE-2004-0819

CVE-2004-0819 affects OpenBSD 3.4 and 3.5 when a gateway is configured as a bridging firewall with the link2 option for IPSec enabled. A remote attacker can cause a denial of service (crash) by sending an ICMP echo (ping) packet. The available sources (NVD/CVE records) describe the vulnerability ...

CVE-2004-0819

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...

CVE-2002-1420

OpenBSD 3.1 and earlier are affected by a local privilege escalation due to an integer signedness error in select(2): a negative size value passes the boundary check as signed but is then used as unsigned during a data copy, allowing a local user to overwrite kernel memory. Impact: local code/ker...

CVE-2004-0257

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...

CVE-2004-0114

The CVE-2004-0114 issue is a reference-count bug in SHMAT (System V Shared Memory) on FreeBSD/NetBSD/OpenBSD where shmat(2) increments the vm_object reference count and then calls vm_map_find; if vm_map_find fails, the reference count is not decremented. This can allow local attackers to gain rea...

CVE-2004-0114

The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vmmapfind function fails, which could allow local users to gain read or...

CVE-2002-1420

Integer signedness error in select on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation...

CVE-2004-0257

Technical details about CVE-2004-0257 are not publicly provided in the supplied documents. Available records describe a DoS condition via IPv6 MTU-related packets but do not specify affected products, versions, root cause, or mitigations. Monitor for updates.

Vulnerability: OpenBSD 3.5 Kernel Panic.

Hi, I have posted this vulnerability note to CERT and gotten no response. It is remotely exploitable, but since it requires commands to be executed as root on the gateway machine, it is unlikely to cause any unplanned disruption. OpenBSD was contacted, and they provided a patch within 12 hours...

OpenBSD bridging ICMP DoS

If bridging is used, ICMP echo packet causes system to crash...

isakmpd crashes when handling ISAKMP packets with malformed "Delete Payload"

Overview A vulnerability exists in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security Association and Key Manageme...

isakmpd fails to handle ISAKMP packets with "Payload Length" of zero

Overview A vulnerability exists in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security Association and Key Manageme...

Integer underflow vulnerability in isakmpd "Certificate Request Payload" handling

Overview A vulnerability exists in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security Association and Key Manageme...

Multiple memory leak vulnerabilities in isakmpd

Overview Multiple memory handling vulnerabilities exist in the isakmpd that could allow a remote attacker to cause a denial of service. Description The OpenBSD isakmpd establishes security associations for encrypted and authenticated IPsec network traffic. It implements the Internet Security...