Re: [Full-disclosure] ntpd stack evasion exploit



!bSt bitwarz Security Team napisał(a):
> /* ntpd remote root no-exec stack evasion spl0it
> * by m0sk0v

well... stolen code from my exploit (and advisory) published almost five
years ago on bugtraq. only comments and printfs where changed.

http://marc.theaimsgroup.com/?l=bugtraq&m=98642418618512&w=2

--
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NICHDL: PMF9-RIPE *
* JID: venglin@xxxxxxxxxxxxxxx ** PGP ID: 2578FCAD ** HAM-RADIO: SQ8JIV *
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • Re: [Full-Disclosure] Symantec ActiveX control buffer overflow
    ... I didn't post it to bugtraq, ... the advisory until a fix were ready, ... I won't post anymore advisories to SecurityFocus ... Symantec company and Symantec is member of oisafety ...
    (Full-Disclosure)
  • Re: [Full-disclosure] defining bugtraq
    ... Subject: defining bugtraq ... corporations about 0day, governments and corporations should only discuss ... the government or corporation should not disrespect the person who posted ... severity or weight of an advisory post on bugtraq. ...
    (Full-Disclosure)
  • Re: Multiple SQL injections and XSS in FishCart 3.1
    ... I am the principal behind FishCart, discussed in the above advisory. ... I found tonight after posting to bugtraq about another reported problem that this previous bug is reported as unpatched. ...
    (Bugtraq)