Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




fulldisclosure logo Full Disclosure mailing list archives

RE: Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST)
From: "Hudak, Tyler" <Tyler.Hudak () roadway com>
Date: Fri, 20 Jun 2003 13:13:01 -0400

Koec's "exploit" just executes the shell code on your own machine, as
evidenced by this line:

void(*b)()=(void*)shellcode;b();

All the rest of the program does is open a connection to the machine
specified on port 80 and then close it down (as can be safely seen by
removing that line).

I'm not a shellcode expert, so someone else will have to say what it does,
but its probably not pretty.

Unless someone can correct me, I'd avoid running this.

Tyler

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]