Full Disclosure: Re: Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST)

["David M. Wilson" <dw-lists.netsys.com () botanicus net>]

On Fri, Jun 20, 2003 at 03:27:29PM -0400, gml wrote:
> What does that do?
> >    void(*b)()=(void*)shellcode;b();
It declares a function pointer ('b'), which is initialized to point at
the 'shell code', then jumped into ('b()'). In other words, if you run
that program, the shell code will get executed on your local machine.

The content of the shell code is regardless, the exploit shouldn't be
trying to do that.

David.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html