245 matches found
sing (debian) vunlerability?
Hello, The sing utility Send Nasty ICMP Garbage is a ping replacement that allows sending ICMP packets with spoofed source and custom ICMP types/codes http://sourceforge.net/projects/sing. The debian package provides sing as a suid binary actually, the sid distribution asks the user whether he'd...
OpenAFS filesystem privilege esccalation
Attacke can make fake suid binary on network disk by using protocol weakness...
Zend Platform ini_modifier工具非授权操作漏洞
Zend Platform是企业级PHP应用的运行时平台环境。 Zend Platform软件包的inimodifier工具在使用上存在漏洞,本地攻击者可能利用此漏洞提升权限。 在安装Zend Platform过程中安装了一个名为inimodifier的suid组二进制程序。 $ ls -la /usr/local/Zend/sbin/inimodifier -rwxr-sr-x 1 root zendtech 243240 2006-08-14 16:24 inimodifier...
linux/x86 setuid(0) + execve(/bin/sh) 28 bytes
Exploit for linux/x86 platform in category shellcode ============================================== linux/x86 setuid0 + execve/bin/sh 28 bytes ============================================== / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode...
linux/x86 - setuid0 + execve/bin/sh 28 bytes
linux/x86 setuid0 + execve/bin/sh 28 bytes. Shellcode exploit for linx86 platform / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode once again... setuid 6 bytes + execve 22 bytes = 28 bytes Same as revenge-execve.c we start the 2 system cal...