full-disclosure - Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: dw-lists.netsys.com at botanicus.net (David M. Wilson)
Subject: Apache 1.3.27 Remote Root 0-Day Exploit  (OFFICIAL POST)

On Fri, Jun 20, 2003 at 03:27:29PM -0400, gml wrote:
> What does that do?

> >    void(*b)()=(void*)shellcode;b();

It declares a function pointer ('b'), which is initialized to point at
the 'shell code', then jumped into ('b()'). In other words, if you run
that program, the shell code will get executed on your local machine.

The content of the shell code is regardless, the exploit shouldn't be
trying to do that.

David.