full-disclosure - Vulnerabilities in OpenBSD and billions is other websites

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 6 Jun 2012 16:15:06 -0400
From: Григорий Братислава <musntlive@...il.com>
To: full-disclosure@...ts.grok.org.uk, submissions@...ketstormsecurity.org, 
	bugtraq@...urityfocus.com
Subject: Vulnerabilities in OpenBSD and billions is other
	websites

Hello full disclosure!! !! (is I forget another !!)

I want to warn you about is vulnerability in OpenBSD and is maybe
perhaps possible is Linux and BeOS.

-------------------------
Is affected maybe possible perhaps
-------------------------

OpenBSD
NetBSD
FreeBSD
DragonflyBSD
FruitcakeBSD
Ubuntu
Kbuntu
Anotherbuntu
BeOS
NeXTOS

-------------------------
Details:
-------------------------

Is when someone is play knetwalk is user can get full scope!! Root!!


-------------------------
Is proof:
-------------------------

[grigori@...tislava] knetwalk > /dev/nullaruski 2>&1 && knetwalk >
/dev/nullaruski 2>&1 && knetwalk > /dev/nullaruski 2>&1 &&

And is you do this is 255 times we has:

[grigori@...tislava] knetwalk > /dev/nullaruski 2>&1 && knetwalk >
/dev/nullaruski 2>&1 && knetwalk > /dev/nullaruski 2>&1 &&
kbuildsycoca running...
DCOP Cleaning up dead connections.
segmentation is fault
[root@...tislva]# ICE default IO error handler doing an exit(), pid =
1984, errno = 42


-------------------------
Timeline:
-------------------------
1984.01.14 Madonna is sing Holiday on American Bandstand
1984.01.24 Apple is release personal computer (musntlive is has
exploit at this time)
1984.02.19 Is we make nuclear test at Kazakh Semipalitinsk
1984.02.19 musntlive plan advisory
2012.06.06 musntlive disclose real 0day is not fake


-- 

`Wherever I is go - there am I routed`

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/