linux/x86 - setuid0 + execve/bin/sh 28 bytes

linux/x86 setuid0 + execve/bin/sh 28 bytes. Shellcode exploit for linx86 platform / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode once again... setuid 6 bytes + execve 22 bytes = 28 bytes Same as revenge-execve.c we start the 2 system cal...

Kerio Webstar privilege escalation

Suid application loads library from current directory...

Lotus Domino tunekrnl utility buffer overflow

Multiple buffer overflows in suid utility...

zgv $HOME overflow

No description provided by source. / zgv exploit coded by BeastMaster V on June 20, 1997 USAGE: For some strage reason, the filename length of this particular exploit must me one character long, otherwise you will be drop into a normal unpriviledged shell. Go Figure.... $ cp zgvexploit.c n.c $ cc...

Solaris 10 DtPrintinfo/Session Local Root Exploit (x86)

No description provided by source. !/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] greetz to raptor for sharing this vulnerability and in no specific order just want to show love for: nemo, andrewg, jduck,...

rpc Suid Privledge Exploit

No description provided by source. !/usr/bin/perl -w exploits suid privledges on rcp Not really tested this but hey works on redhat6.2 not werk on freebsd4.1 stable bug discovered by Andrew Griffiths Exploit written by tlabs greetz to those that know me innit Please set your rcpfile this can be...

SCO Unixware 7.1.3 (ptrace) Local Privilege Escalation Exploit

No description provided by source. / SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has t...

dump 0.4b15 exploit (Redhat 6.2)

No description provided by source. / dump-0.4b15x.c dump-0.4b15 exploit: Redhat 6.2 dump command executes external program with suid priviledge. affected: /sbin/dump /sbin/dump.static /sbin/restore /sbin/restore.static Bug found by [email protected] This example was coded by...

dump 0.4b15 Local Root Exploit

No description provided by source. !/bin/sh Redhat 6.2 dump command executes external program with suid priviledge. Discovered by Mat [email protected] Written for and by a scriptkid Tasc ;P Remember, there's no cure for BSE echo "dump-0.4b15 root exploit" echo "Discovered by Mat [email protected]...

suid_perl 5.001 vulnerability

No description provided by source. !/usr/bin/suidperl -U $ENVPATH="/bin:/usr/bin"; $=0;$=0; exec"/bin/bash";...

cdrecord $RSH exec() SUID Shell Creation

No description provided by source. !/bin/bash cdrecord-suidshell.sh - Iruid CAU 09.2004 Exploits cdrecord's exec of $RSH before dropping privs cat ./cpbinbash.c include include include main int argc, char argv int fd1, fd2; int count; char buffer1; / Set ID's / setuid geteuid ; setgid geteuid ; /...

HP-UX 11i (LIBC TZ enviroment variable) Local Root Exploit

No description provided by source. / HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the...

HP-UX 11i - LIBC TZ Enviroment Variable Privilege Escalation

HP-UX 11i - LIBC TZ Enviroment Variable Privilege Escalation / HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient...

HP-UX 11i - 'LIBC TZ' Enviroment Variable Privilege Escalation

/ HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the localtimer and related functions. Any...

Matasano Advisory: MacOS X Mach Exception Server Privilege Escalation

Matasano Security Advisory MacOS X Mach Exception Server Privilege Escalation Release Date: Fri Sep 29 2006 Affects: MacOS X 10.4 10.4.8, 10.3., OpenStep 4.2 Severity: High - Local root privilege escalation Credit: Dino Dai Zovi ddz at matasano.com Vendor Status: MacOS X 10.4.8 fixes vulnerabilit...

cPanel 5-10 - SUID Wrapper Privilege Escalation

cPanel 5-10 - SUID Wrapper Privilege Escalation source: https://www.securityfocus.com/bid/20163/info cPanel is prone to a remote privilege-escalation vulnerability. A remote attacker can exploit this issue to gain administrative access to the affected application. This may lead to other attacks...

Netragard Security Advisory 2006-06-24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C. -- Vulnerability Research and Exploitation Team www.netragard.com Advisory Information - ---------------------------------------------------------------------- Contact: : Adriel T. Desautels Advisory ID : NETRAGARD-20060624 Product...

CVE-2006-4227

CVE-2006-4227 affects MySQL premade prior to 5.0.25 and 5.1 prior to 5.1.12. The flaw lets arguments to suid routines be evaluated in the definer’s security context rather than the caller, enabling remote authenticated users to gain privileges through a routine granted with EXECUTE. Mitigations/p...

MySQL 45 - SUID Routine Miscalculation Arbitrary DML Statement Execution

MySQL 45 - SUID Routine Miscalculation Arbitrary DML Statement Execution source: https://www.securityfocus.com/bid/19559/info MySQL is prone to these vulnerabilities: - A privilege-elevation vulnerability. A user with privileges to execute SUID routines may gain elevated privileges by executing...

MySQL 4/5 - SUID Routine Miscalculation Arbitrary DML Statement Execution

source: https://www.securityfocus.com/bid/19559/info MySQL is prone to these vulnerabilities: - A privilege-elevation vulnerability. A user with privileges to execute SUID routines may gain elevated privileges by executing certain commands and code with higher privileges. - A security-bypass...