jetlib.sec » Tags » setuid

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

34 items tagged "setuid"

Related tags: txt [+], x86 [+], bin [+], x86 linux [+], trendmicro [+], root permissions [+], root [+], iwss [+], freebsd [+], encrypted [+], chmod [+], verbose option [+], verbose [+], sigkill [+], shell [+], setgid [+], samba [+], reboot [+], polymorphic [+], osx [+], option information [+], null pointer dereference [+], kerberos 5 [+], intel [+], information disclosure vulnerability [+], gss api [+], usr [+], sys [+], superh sh [+], shadow [+], sh4 [+], sda [+], sbin [+], passwd [+], iph [+], dev [+], ARM [+], linux [+], execve [+], shellcode [+]

• December 31, 2011
• 14:00

  [linux/x86] - linux/x86 shellcode - setuid(0)+setgid(0)+add user 'iph' without password

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [linux/x86] - linux/x86 shellcode - setuid(0)+setgid(0)+add user 'iph' without password

  Tags:  setuid linux shellcode x86-linux iph  

• October 26, 2011
• 16:09

  Trendmicro IWSS 3.1 Privilege Escalation

   » ‎ Packet Storm Security Exploits
  A vulnerability was found in the software IWSS of TrendMicro that could allow an attacker to gain root access in the system. The binary "patchCmd" has sticky permissions for the "setuid" and "setgid" with the user root. The execution is allowed to all users. The code performs a setuid(0) before an a system() by that the execution will take root permissions regardless of user permissions.

  Tags:  root iwss trendmicro root-permissions setuid  

• 16:09

  Trendmicro IWSS 3.1 Privilege Escalation

   » ‎ Packet Storm Security Recent Files
  A vulnerability was found in the software IWSS of TrendMicro that could allow an attacker to gain root access in the system. The binary "patchCmd" has sticky permissions for the "setuid" and "setgid" with the user root. The execution is allowed to all users. The code performs a setuid(0) before an a system() by that the execution will take root permissions regardless of user permissions.

  Tags:  root iwss trendmicro root-permissions setuid  

• 16:09

  Trendmicro IWSS 3.1 Privilege Escalation

   » ‎ Packet Storm Security Misc. Files
  A vulnerability was found in the software IWSS of TrendMicro that could allow an attacker to gain root access in the system. The binary "patchCmd" has sticky permissions for the "setuid" and "setgid" with the user root. The execution is allowed to all users. The code performs a setuid(0) before an a system() by that the execution will take root permissions regardless of user permissions.

  Tags:  root iwss trendmicro root-permissions setuid  

• June 21, 2011
• 21:00

  [linux/x86] - Linux/SuperH-sh4-setuid(0)-chmod("/etc/shadow", 0666)-exit(0)-43 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [linux/x86] - Linux/SuperH-sh4-setuid(0)-chmod("/etc/shadow", 0666)-exit(0)-43 bytes

  Tags:  setuid linux superh-sh x86-linux sh4  

• May 30, 2011
• 0:09

  FreeBSD/x86 Encrypted setuid(0) execve /bin/sh Shellcode

   » ‎ Packet Storm Security Recent Files
  51 bytes small FreeBSD/x86 encrypted setuid(0) execve /bin/sh shellcode.

  Tags:  setuid freebsd execve encrypted  

• 0:09

  FreeBSD/x86 Encrypted setuid(0) execve /bin/sh Shellcode

   » ‎ Packet Storm Security Misc. Files
  51 bytes small FreeBSD/x86 encrypted setuid(0) execve /bin/sh shellcode.

  Tags:  setuid freebsd execve encrypted  

• May 28, 2011
• 21:00

  [freebsd/x86] - FreeBSD/x86 encrypted setuid(0) execve /bin/sh 51 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [freebsd/x86] - FreeBSD/x86 encrypted setuid(0) execve /bin/sh 51 bytes

  Tags:  setuid freebsd execve x86 encrypted  

• November 29, 2010
• 15:17

  OSX/Intel Setuid Shell x86_64 Shellcode

   » ‎ Packet Storm Security Recent Files
  51 bytes small OSX / Intel setuid shell for x86_64.

  Tags:  osx intel setuid shell  

• 15:17

  OSX/Intel Setuid Shell x86_64 Shellcode

   » ‎ Packet Storm Security Misc. Files
  51 bytes small OSX / Intel setuid shell for x86_64.

  Tags:  osx intel setuid shell  

• September 23, 2010
• 14:00

  [linux/x86] - linux/x86 setuid(0) and dd of=/dev/sda if=/dev/zero shellcode 74 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [linux/x86] - linux/x86 setuid(0) and dd of=/dev/sda if=/dev/zero shellcode 74 bytes

  Tags:  setuid linux dev x86-linux sda  

• August 15, 2010
• 5:47

  linux/x86 setuid(0) && execve(/bin/sh,0,0) 27 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 setuid(0) && execve(/bin/sh,0,0) 27 bytes

  Tags:  setuid bin execve x86 linux  

• 5:47

  linux/x86 setuid(0) && execve(/usr/sbin/pwunconv,0,0) 42 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 setuid(0) && execve(/usr/sbin/pwunconv,0,0) 42 bytes

  Tags:  setuid usr execve sbin x86  

• July 07, 2010
• 23:03

  MDVSA-2010-129.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-129 - The krshd and v4rcp applications in MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion. The ftpd and ksu programs in MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. Certain invalid GSS-API tokens can cause a GSS-API acceptor (server) to crash due to a null pointer dereference in the GSS-API library. The updated packages have been patched to correct these issues.

  Tags:  setuid gss-api linux null-pointer-dereference kerberos-5  

• 23:02

  MDVSA-2010-129.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-129 - The krshd and v4rcp applications in MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion. The ftpd and ksu programs in MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. Certain invalid GSS-API tokens can cause a GSS-API acceptor (server) to crash due to a null pointer dereference in the GSS-API library. The updated packages have been patched to correct these issues.

  Tags:  setuid gss-api linux null-pointer-dereference kerberos-5  

• June 29, 2010
• 21:06

  linuxarmbinsh-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  38 bytes small setuid(0) and execve( /bin/sh , /bin/sh ,0) Linux / ARM shellcode.

  Tags:  txt setuid bin shellcode execve linux  

• 21:05

  killallarm-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  28 bytes small setuid(0) and kill(-1, SIGKILL) Linux / ARM shellcode.

  Tags:  txt setuid sigkill shellcode linux  

• 1:00

  linux/ARM - setuid(0) & execve("/bin/sh","/bin/sh",0) - 38 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/ARM - setuid(0) & execve("/bin/sh","/bin/sh",0) - 38 bytes

  Tags:  setuid bin execve linux  

• 1:00

  linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes

  Tags:  setuid ARM linux sigkill  

• June 17, 2010
• 22:02

  setuidreboot-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  51 bytes small setuid(0) and reboot Linux / x86-64 shellcode.

  Tags:  txt setuid reboot shellcode linux  

• 22:02

  setuidreboot-shellcode.txt

   » ‎ Packet Storm Security Recent Files
  51 bytes small setuid(0) and reboot Linux / x86-64 shellcode.

  Tags:  txt setuid reboot shellcode linux  

• 1:00

  linux/x86-64 setuid(0) & chmod ("/etc/passwd", 0777) & exit(0) 63 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86-64 setuid(0) & chmod ("/etc/passwd", 0777) & exit(0) 63 bytes

  Tags:  chmod setuid passwd linux  

• June 01, 2010
• 22:01

  linuxpolymorphic-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  61 bytes small polymorphic setuid(0) + chmod( /etc/shadow , 0666) Linux/x86 shellcode.

  Tags:  txt chmod setuid shellcode polymorphic x86  

• 22:01

  setuid0setgid0binsh-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  39 bytes small sys_setuid(0) and sys_setgid(0) and execve ( /bin/sh ) Linux/x86 shellcode.

  Tags:  txt setgid setuid shellcode execve  

• 1:00

  linux/x86 sys_setuid(0) & sys_setgid(0) & execve ("/bin/sh") 39 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 sys_setuid(0) & sys_setgid(0) & execve ("/bin/sh") 39 bytes

  Tags:  setgid setuid sys linux  

• May 31, 2010
• 1:00

  linux/x86 Polymorphic - setuid(0) + chmod("/etc/shadow", 0666) 61 Bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 Polymorphic - setuid(0) + chmod("/etc/shadow", 0666) 61 Bytes

  Tags:  polymorphic setuid linux  

• May 03, 2010
• 1:00

  linux/x86 setuid(0) + chmod("/etc/shadow", 0666) Shellcode 37 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 setuid(0) + chmod("/etc/shadow", 0666) Shellcode 37 bytes

  Tags:  chmod setuid shadow shellcode x86 linux  

• April 24, 2010
• 10:00

  27bytessetexec-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  27 bytes small setuid(0) ^ execve( /bin/sh , 0, 0) shellcode.

  Tags:  txt setuid execve shellcode  

• 10:00

  27bytessetexec-shellcode.txt

   » ‎ Packet Storm Security Recent Files
  27 bytes small setuid(0) ^ execve( /bin/sh , 0, 0) shellcode.

  Tags:  txt setuid execve shellcode  

• 1:00

  linux/x86 setuid(0) ^ execve("/bin/sh", 0, 0) shellcode 27 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 setuid(0) ^ execve("/bin/sh", 0, 0) shellcode 27 bytes

  Tags:  setuid bin execve x86 linux  

• April 23, 2010
• 21:01

  29bytessetuid-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  29 bytes small setuid(0) and execve( /bin/sh ,...) shellcode.

  Tags:  txt setuid execve shellcode  

• 1:00

  linux/x86 setuid(0) + execve("/bin/sh",...) Shellcode 29 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 setuid(0) + execve("/bin/sh",...) Shellcode 29 bytes

  Tags:  setuid bin execve x86 linux  

• April 01, 2010
• 0:00

  Vuln: Samba setuid 'mount.cifs' Verbose Option Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Samba setuid 'mount.cifs' Verbose Option Information Disclosure Vulnerability

  Tags:  setuid samba verbose information-disclosure-vulnerability verbose-option option-information  

• January 29, 2010
• 0:00

  Vuln: Samba setuid 'mount.cifs' Verbose Option Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Samba setuid 'mount.cifs' Verbose Option Information Disclosure Vulnerability

  Tags:  setuid samba verbose information-disclosure-vulnerability verbose-option option-information