full-disclosure - CVE-2013-4124 samba nttrans dos private exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CAHbG5q-zD70TSwWH1AZ8Pn_PO_GRDc9bo9vhhiTALCmCH=ZOBQ@mail.gmail.com>
Date: Wed, 21 Aug 2013 15:47:16 +0900
From: x90c <geinblues@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: CVE-2013-4124 samba nttrans dos private exploit

Hi Forks!

It's my samba private exploit and article
of it. the security bug occurs while nttrans
reply in samba daemon source code tree.

the remote dos exploit that i copied from
another nttrans exploit in 2003. and can't
test it yet, check it out!

CVE-2013-4124 samba dos private exploit:
- http://www.x90c.org/exploits/samba_nttr
  ans_exploit.c

... and I left an article about the bug with an analyze

samba nttrans reply integer overflow:
- http://www.x90c.org/articles/samba_nttran
  s_reply_integer_overflow.txt

x90c

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/