| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <4BD5847A.3070507@digit-labs.org>
Date: Mon, 26 Apr 2010 13:18:02 +0100
From: mu-b <mu-b@...it-labs.org>
To: full-disclosure@...ts.grok.org.uk
Subject: NovaStor NovaNet <= 13.0 issues
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
All - many of the following were inexplicably fixed in the latest
version (NovaBACKUP Network 13.0), but still, a 2.5 year run isn't too
bad...
http://digit-labs.org/files/exploits/novanet-own-lnx.c
- - linux remote root <= 12.0
http://digit-labs.org/files/exploits/novanet-read.c
- - arbitrary remote dword read <= 12.0
http://digit-labs.org/files/exploits/novanet-own.c
- - Windows (no-DEP/NX, NovaNet 11.0) remote SYSTEM <= 12.0
(messy, there is a cleaner version)
They seemed to have missed the last one, so it still works on 13.0, but
sadly the most useless :(
http://digit-labs.org/files/exploits/novanet-dos.c
- - null deref remote DoS <= 13.0
- --
mu-b
(mu-b@...it-labs.org)
"Only a few people will follow the proof. Whoever does will
spend the rest of his life convincing people it is correct."
- Anonymous, "P ?= NP"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkvVhHoACgkQY0H9BP42EjyqLwCfR941RwSLqTuh3xE2jDx4fBm6
REUAn36dzHIwJzq+dmlkZNSACKlz7eOW
=aSH0
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists