full-disclosure - Re: dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 20 Mar 2007 16:36:34 +0100
From: starcadi <starcadi@...il.com>
To: 3APA3A <3APA3A@...urity.nnov.ru>
Cc: listgrok <full-disclosure@...ts.grok.org.uk>
Subject: Re: dkftpbench 0.45 (Platoon:init) Local buffer
	overflow vulnerability

sorry no suid

2007/3/20, 3APA3A <3APA3A@...urity.nnov.ru>:
> Dear starcadi,
>
> Again,  a  very  effective  way for user to exploit himself. How can you
> elevate your privileges that way? Is dkftpbench suid?
>
> --Monday, March 19, 2007, 10:32:27 PM, you wrote to full-disclosure@...ts.grok.org.uk:
>
> s> Description:
>
> s> dkftpbench is an FTP benchmark program inspired by SPECweb99. The
>
> s> $ dkftpbench -n1 -hlocalhost -p21 -u test -p`perl -e "print 'A'x135"`
> s> -v1 Segmentation fault $
>
>
>
> --
> ~/ZARAZA http://securityvulns.com/
> Почтенные ископаемые! Жду от вас дальнейших писем.  (Твен)
>
>


-- 
.original http://intel.shacknet.nu/
~ starcadi
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/