Bugtraq mailing list archives
SuSE 7.2 (& others) sendmail local xploit
From: RoMaN SoFt / LLFB!! <roman () madrid com>
Date: Sun, 26 Aug 2001 11:45:39 +0200
Hi. This is the 'alsou.c' sendmail 8.11.x (x<=5) xploit with some very slight modifications: - extensive documentation and example on how to get this to work on several distros / sendmail versions - working on default SuSE 7.2 (sendmail 8.11.3): - also included working parameters for SuSE 6.4 with *custom compiled* sendmail 8.11.2: - allows to give offset in command line. Use with 'smxploit' script (also included) in order to find correct offset. This will be necessary in different distros / sendmail versions - QUICK GUIDE for finding propper exploitation values (VECT, GOT and OFFSET): ==> CASE A: Non-stripped binary: ==> CASE B: Stripped binary (this is the default on several distros): Please read complete alsou2.c comment lines for the whole explanation. Regards, =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman () madrid com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Attachment:
alsou2.tar.gz
Description: SuSE 7.2 (& others) sendmail local xploit
Current thread:
- SuSE 7.2 (& others) sendmail local xploit RoMaN SoFt / LLFB!! (Aug 26)