phf buffer overflow exploit for Linux-x86

Exploit for cgi platform in category web applications ========================================= phf buffer overflow exploit for Linux-x86 ========================================= / | phx.c -- phf buffer overflow exploit for Linux-ix86 | Copyright c 2000 by proton. All rights reserved. | | This...

PHF (Linux/x86) - Remote Buffer Overflow

/ | phx.c -- phf buffer overflow exploit for Linux-ix86 | Copyright c 2000 by proton. All rights reserved. | | This program is free software; you can redistribute it and/or modify | it under the terms of the GNU General Public License as published by | the Free Software Foundation; either version...

socks5 remote exploit / linux x86

/ !!!! Private do not distribute !!!! 1080r.c socks5 remote exploit / linux x86 Usage: $ ./1080r host command offset Vulnerables: socks5-v1.0r10 compiled on a turbolinux 4.0.5 = 0 socks5-v1.0r9 compiled on a turbolinux 4.0.5 = 0 socks5-v1.0r8 compiled on a turbolinux 4.0.5 = 0 socks5-v1.0r10...

Linux news 1.09.00

Ядро 2.4.0-test10-pre2 В этом патче для ядра содержатся исправления в функциях vmalloc и ioremap с удаленийм функции setpgdir. Исправления включены только для одной архитектуры x86. Разработчикам для других платформ также рекомендуется просмотреть код этих изменений и исправить свой код. Подробне...

linux/x86 execve /bin/sh toupper() evasion 55 bytes

Exploit for linux/x86 platform in category shellcode =================================================== linux/x86 execve /bin/sh toupper evasion 55 bytes =================================================== / Linux/x86 toupper evasion, standard execve /bin/sh used eg. in various imapd exploits...

linux/x86 execve /bin/sh toupper evasion 55 bytes

linux/x86 execve /bin/sh toupper evasion 55 bytes. Shellcode exploit for linx86 platform / Linux/x86 toupper evasion, standard execve /bin/sh used eg. in various imapd exploits. Goes through a loop adding 0x20 to the /bin/sh -= 0x20 string ie. yields /bin/sh after addition. / include char c0de = ...

linux/x86 add user 70 bytes

Exploit for linux/x86 platform in category shellcode =========================== linux/x86 add user 70 bytes =========================== / Linux/x86 Appends the line "z::0:0:::\n" to /etc/passwd. quite old, could be optimized further / include char c0de = / main: / "\xeb\x29" / jmp callz / / star...

linux/x86 break chroot setuid(0) + /bin/sh 132 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 break chroot setuid0 + /bin/sh 132 bytes ==================================================== / Linux/x86 - setreuid0, 0; - chroot-break make a temp dir with mkdir, chroot to tempdi...

linux/x86 add user 70 bytes

linux/x86 add user 70 bytes. Shellcode exploit for linx86 platform / Linux/x86 Appends the line "z::0:0:::\n" to /etc/passwd. quite old, could be optimized further / include char c0de = / main: / "\xeb\x29" / jmp callz / / start: / "\x5e" / popl %esi / "\x29\xc0" / subl %eax, %eax / "\x88\x46\x0b...

KDE 1.11.1.11.1.21.2 - kdesud DISPLAY Environment Variable Overflow

KDE 1.11.1.11.1.21.2 - kdesud DISPLAY Environment Variable Overflow // source: https://www.securityfocus.com/bid/1274/info /usr/bin/kdesud has a DISPLAY environment variable overflow which could allow for the execution of arbitrary code. / KDE: /usr/bin/kdesud exploit by noir x86/Linux...

lpset.overflow

Here's an overflow exploit that works on a non-exec stack on x86 boxes. It demonstrates how it is possible to thread together several libc calls. I have not seen any other exploits for x86 that have done this.. for the lpset bug in sol7 x86. Tim N. define BASE 0xdff40000 define STACK 0x8047e30...

CVE-1999-1588

Buffer overflow in nlpsserver in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen aka System V listener port, TCP port 2766...

Solaris 2.52.67.08 - kcms_configure KCMS_PROFILES Buffer Overflow (2)

Solaris 2.52.67.08 - kcmsconfigure KCMSPROFILES Buffer Overflow 2 / source: https://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the...

Solaris 2.5/2.6/7.0/8 - kcms_configure KCMS_PROFILES Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the KCMSPROFILES environment variable parser in a shared library...

Solaris 2.5/2.6/7.0/8 - kcms_configure KCMS_PROFILES Buffer Overflow (2)

/ source: https://www.securityfocus.com/bid/2605/info The Kodak Color Management System configuration tool 'kcmsconfigure' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in the KCMSPROFILES environment variable parser in a shared library...

Hughes Technologies Mini SQL (mSQL) 2.0.11 - w3-msql Remote Buffer Overflow

Hughes Technologies Mini SQL mSQL 2.0.11 - w3-msql Remote Buffer Overflow // source: https://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be...

Hughes Technologies Mini SQL (mSQL) 2.0.11 - 'w3-msql' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be exploitable. The exploitable buffer is the content-length field and the...

CVE-1999-0139

CVE-1999-0139 describes a buffer overflow in Solaris x86 mkcookie that allows local users to obtain root access. The Red Hat, EUVD, CVE, and NVD entries confirm the issue and its local-privilege-elevation impact. The provided records do not specify affected Solaris versions, exact vulnerable func...

CVE-1999-0139

Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access...

linux_GNOME_exploit.txt

Greetings, Virtually any program using the GNOME libraries is vulnerable to a buffer overflow attack. The attack comes in the form: /path/to/gnome/prog --enable-sound --espeaker=$80bytebuffer The following exploit should work against any GNOME program, though I tried it on the irony...