full-disclosure - Re: Sendmail/Postfix FORWARD Remote Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 13 Dec 2007 22:20:21 -0600
From: "Fredrick Diggle" <fdiggle@...il.com>
To: kcope <kingcope@....net>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Sendmail/Postfix FORWARD Remote Exploit

You should post this to milw0rm as it can always use quality exploit code
like this. I also have some priv8 code which I would like to disclose which
is the same type of vulnerability.

/*
 * Author: Fredrick Diggle
 * Vuln: execve system call allows arbitrary code execution
 * Status: VERY PRIV8
 * DO NOT RELEASE OR FRED DIGGLE WILL EAT YOUR FAMILY
 */
#include <stdlib.h>
#include <stdio.h>
#include <unistd.h>
#define INFINITY 73
#ifdef DIGGLEISAWESOME
int main(int argc, char **argv) {
   if (argc < 2) { fprintf(stderr, "usage: %s [command to run]\n\tPRIV8 Fred
Diggle 0day\n", argv[0]); return INFINITY; }
   execve(argv[1], &argv[1], 0);
}
#endif



On Dec 13, 2007 8:57 PM, kcope <kingcope@....net> wrote:

> exploiting "features"
>
> (see attached)
>
> - -kcope / 2007
>
> --
> Psssst! Schon vom neuen GMX MultiMessenger gehört?
> Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/