lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
From: icbm at 0x557.net (icbm)
Subject: XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow

Vendor:
- -------

http://www.evolutionx.info

Vulnerable version:
- -------------------

Test on EvolutionX 3921 3935, maybe all version of EvolutionX

Vunlnerablity:
- --------------

EvolutionX is a Replacement of Microsoft Dashboard.It has these
Features:Build in FTP Server, Configurable Menu System, Flash BIOS utility,
Upgrade Harddisk and Format/Partition easily, Create game backups and
Build in Trainer menu system.

1.ftp 'cd' command buffer overflow:

This issue exists when 'cd' command followed with a long string
which will freeze the EvolutionX.

2.telnet 'dir' command buffer overflow:

This issue exists when 'dir' command followed with a long string
which will freeze the EvolutionX.In addition, when you type a
long sting just in command line it also cause EvolutionX freeze.

Credits:
- --------

Jokko from Evolutionx team who fast identified this shit:)
All guys on irc@...57.org.
All guys in venustech who have xbox:)You know who you are:)

About SST:
- ----------

Do we really exist?:)


- --
- -------------------------------------------------------------------------
Web page:                                                  www.0x557.org
My blog:                                             blog.0x557.org/icbm

My GPG-Key:   gpg --keyserver search.keyserver.net --recv-key 0xB527987A
Key Fingerprint:       F990 D012 689B 2B11 6504 75E3 BFCD 4521 B527 987A
- -------------------------------------------------------------------------
About SST:                                           Do we really exist?
- -------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAKFHGv81FIbUnmHoRAt1uAJoCrnWKTEntq5BaSIIWlrMtP2i+VgCghy30
FvVtiwsjKzMG5+DJ6cPmkEM=
=GkRR
-----END PGP SIGNATURE-----


Powered by blists - more mailing lists