798 matches found
RO CP root exploit
effects all versions of ROCP on an apache based system how it is done first of all i was testing on my friends ragnarok server witch uses ROCP Version 4.3.4a on an apache based system and so i was stunmling through various files i shouldnt have access to such as...
FreeBSD : cdrdao -- unspecified privilege escalation vulnerability (d51a7e6e-c546-11d9-9aed-000e0c2e438a)
The developers of cdrdao report that there is a potential root exploit in the software. In order to be able to succesfully exploit this vulnerability cdrdao must be installed setuid root. When succesfully exploited a local user might get escalated privileges. By default this port is not installed...
[SECURITY] [DSA 725-2] New ppxp packages fix local root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 725-2 [email protected] http://www.debian.org/security/ Martin Schulze July 4th, 2005 http://www.debian.org/security/faq -...
Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)
Exploit for bsd platform in category local exploits ==================================================================== Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit openbsd ==================================================================== include include include include include...
Solaris 9 / 10 ld.so Local Root Exploit (2)
Exploit for solaris platform in category local exploits =========================================== Solaris 9 / 10 ld.so Local Root Exploit 2 =========================================== / Solaris 9 on SPARC: $ cat dupa.c / char sh = / setuid / "\x90\x08\x3f\xff\x82\x10\x20\x17\x91\xd0\x20\x08" /...
Solaris 9 / 10 ld.so Local Root Exploit (1)
Exploit for solaris platform in category local exploits =========================================== Solaris 9 / 10 ld.so Local Root Exploit 1 =========================================== / - SunOS 5.10 Generic i86pc i386 i86pc - SunOS 5.9 Generic112233-12 sun4u It does NOT work on: SunOS 5.8...
Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit
No description provided by source. / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes: tested on Debian Sarge Linux...
[SECURITY] [DSA 725-1] New ppxp packages fix local root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 725-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2005 http://www.debian.org/security/faq -...
cdrdao -- unspecified privilege escalation vulnerability
The developers of cdrdao report that there is a potential root exploit in the software. In order to be able to succesfully exploit this vulnerability cdrdao must be installed setuid root. When succesfully exploited a local user might get escalated privileges. By default this port is not installed...
dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit
Exploit for linux platform in category remote exploits ============================================================== dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit ============================================================== / dSMTP - SMTP Mail Server 3.1b Linux Remote Root...
dSMTP Mail Server 3.1b (Linux) - Format String
dSMTP Mail Server 3.1b Linux - Format String / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a...
dSMTP Mail Server 3.1b (Linux) - Format String
/ dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly more NOTE: before you start, chang...
Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit (3rd)
Exploit for unknown platform in category remote exploits =============================================================== Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit 3rd =============================================================== / \ golden ftp 2.52.0.0 remote r00t exploit / ...
Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit (3rd)
No description provided by source. / \ golden ftp 2.52.0.0 remote r00t exploit / \ remote r00t exploit binds 4444 port on remote machine. / tested on: winxp sp0 rus \ / simple stack overflow in golden ftpd. \ if retaddr isn't right, ftpd will crash, and admin will be in big shit / 'coz ftpd won't...
mtftpd <= 0.0.3 Remote Root Exploit
Exploit for linux platform in category remote exploits =================================== mtftpd include include include include include include ne...
Smail 3.2.0.120 Remote Root Heap Overflow Exploit
No description provided by source. / 0 smail preparseaddress1 heap bof remote root exploit infamous42md AT hotpop DOT com Shouts: BMF, wipe with the left, eat with the right Notes: You can't have any characters in overflow buffer that isspace returns true for. The shellcode is clear of them, but ...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
Exploit for aix platform in category local exploits ============================================================= AIX uname echo '/usr/bin/chown root:system ./ksh' uname echo '/usr/bin/chmod 777 ./ksh' uname echo '/usr/bin/chmod +s ./ksh' uname /usr/bin/chmod 777 uname PATH=./ export PATH...
getr00t.sh
!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...
Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow / Local Privilege Escalation
/ MacOS XCFCHARSETPATH: local root exploit. by: [email protected] fakehalo/realhalo found by: iDefense anon finder saw the advisory on bugtraq and figured i'd slap this together, so simple i had to. exploits via the /usr/bin/su binary. you must press ENTER at the "Password: " prompt. / include inclu...
[SECURITY] [DSA 693-1] New luxman packages fix local root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 693-1 [email protected] http://www.debian.org/security/ Martin Schulze March 14, 2005 http://www.debian.org/security/faq -...