Section: .. / groups / shadowpenguin / unix-exploits /
| /// File Name: |
ex_admintool.c |
Description:
|
Admintool local root exploit for Solaris2.6/7 Sparc machines.
| | File Size: | 3029 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 68f7d2c4497e4f6766f8db1c517c1ac3 |
|
| /// File Name: |
ex_bbc.c |
Description:
|
ex_bbc.c exploits a bounds checking error in /usr/jp/bin/mh/bbc which was distributed with the mh-6.8.3 package. Local root compromise.
| | Author: | UNYUN | | Homepage: | http://shadowpenguin.backsection.net | | File Size: | 1957 | | Last Modified: | Nov 25 04:00:00 1999 |
| MD5 Checksum: | a5b2d66a75247c7d8c9cb5c5bceb2ce4 |
|
| /// File Name: |
ex_canuum.c |
Description:
|
Local root exploit code for buffer overflow in canuum for Japanese Linux.
| | File Size: | 1795 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 08d584cfaedebba6322e15ff0bc6ae6e |
|
| /// File Name: |
ex_dtprintinfo86.c |
Description:
|
x_dtprintinfo.c exploits a stack buffer overflow present in x86 versions of Solaris 2.6 and 2.7. Local root compromise.
| | File Size: | 1970 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | cf98cb6e1da14dd39031c8201e2dc582 |
|
| /// File Name: |
ex_dtprintinfosp.c |
Description:
|
WSparc port of the exploit code for the dtprintinfo stack buffer overflow present in Solaris 2.6 and 2.7 for Sparc. Local root compromise.
| | File Size: | 1931 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | cfa8cae28e3e09052552a8d7b722bdeb |
|
| /// File Name: |
ex_inc.c |
Description:
|
ex_inc.c exploits a bounds checking error in /usr/jp/bin/mh/inc which was distributed with the mh-6.8.3 package. Local root compromise.
| | Author: | UNYUN | | Homepage: | http://shadowpenguin.backsection.net | | File Size: | 1621 | | Last Modified: | Nov 25 04:05:08 1999 |
| MD5 Checksum: | 72428b901f7f45c05e3c1b5048f8275e |
|
| /// File Name: |
ex_kcms_configure86.c |
Description:
|
kcms_configure has a overflow bug with "-P" option and it has been reported(107339-01). But this program has another hole. This hole has not been not reported, and the paches are not published at this time. kcms_configure overflows if long string is specified in NETPATH environment, and it is exploitable. I have included an exploit for Solaris7 intel edition to obtain root privilege.
| | Author: | UNYUN | | Homepage: | http://shadowpenguin.backsection.net | | File Size: | 2468 | | Last Modified: | Nov 25 04:00:00 1999 |
| MD5 Checksum: | 96891067efbb4ca666ca294943ae33b0 |
|
| /// File Name: |
ex_libc.c |
Description:
|
Exploit code for Solaris 2.6, 2.7 (sparc) libc/LC_MESSAGES buffer overflow that results in root compromise.
| | File Size: | 1815 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | e1ab7379ca0d6ddacf82ca872b94caa4 |
|
| /// File Name: |
ex_lpset86.c |
Description:
|
Local root exploit code for buffer overflow in lpset, for Solaris x86 machines.
| | File Size: | 1898 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 6e8bfc6d259a59ff3711b02364fcc462 |
|
| /// File Name: |
ex_mailtool.c |
Description:
|
The mailer programs (mailtool and dtmail) and mail message print filter (dtmailpr) which are installed on Solaris7 have exploitable buffer overflow bugs. These programs are sgid (mail group) programs, local user can obtain mail group. The mail files are generated with 660 permission, so any user can read/write other user's mail files. I coded the exploits to get mail gid(egid=6). There are for Intel Solaris7. There are same kind of problems on Sparc Solaris7 and Solaris2.6 (Intel,Sparc).
| | Author: | UNYUN | | Homepage: | http://shadowpenguin.backsection.net | | File Size: | 6306 | | Last Modified: | Nov 25 04:00:00 1999 |
| MD5 Checksum: | 68399227ff709fd06cd83d967dcf842a |
|
| /// File Name: |
ex_sdtcm_convert.c |
Description:
|
Local root exploit for buffer overflow condition in sdtcm_convert, for Solaris Sparc machines.
| | File Size: | 2078 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 87ad1fbf6788465fdf86d444b37bf205 |
|
| /// File Name: |
ex_sdtcm_convert86.c |
Description:
|
Local root exploit for buffer overflow condition in sdtcm_convert, for Solaris x86 machines.
| | File Size: | 2445 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | d955ef3f946bcdff24e790deb5daf06a |
|
| /// File Name: |
ex_uum.c |
Description:
|
Local root exploit code for buffer overflow in uum for Japanese Linux.
| | File Size: | 1571 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 863a7d14785073101a7d49dd62001678 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
