exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Euan Briggs

iDEFENSE Security Advisory 2003-02-12.t

Posted Feb 13, 2003

Authored by Euan Briggs, iDefense Labs | Site idefense.com

IBM's AIX contains a locally exploitable buffer overflow in libIM which allows attackers to execute code with the privileges of an application calling the library. The "/usr/lpp/X11/bin/aixterm" binary calls the libIM library and is then installed setuid root by default on AIX. The "-im" command line argument used by aixterm causes the binary to crash when filled with a string about 50 bytes in length, allowing attackers to control the return address and run code as root.

tags | advisory, overflow, root

systems | aix

SHA-256 | d48b6926c82ffe75c223b8a03b1f5182ccf081eafc0e952920b165ba77191d02

Download | Favorite | View

idefense.tru64.txt

Posted Sep 20, 2002

Authored by David Endler, Euan Briggs | Site idefense.com

iDEFENSE Security Advisory 09.18.2002 - Three locally exploitable buffer overflows have been found in older versions of Tru64/OSF1. The -s parameter to the uucp utility can give local root, as can inc mail and dxterm.

tags | overflow, local, root

SHA-256 | 613c7847d1e5ec418d42614e0651bd7d1c878053db6ad2a0af3bc69ad0dbbcc2

Download | Favorite | View