Bugtraq mailing list archives
SuSE 7.2 (& others) sendmail local xploit
From: RoMaN SoFt / LLFB!! <roman () madrid com>
Date: Sun, 26 Aug 2001 11:45:39 +0200
Hi.
This is the 'alsou.c' sendmail 8.11.x (x<=5) xploit with some very
slight modifications:
- extensive documentation and example on how to get this to work on
several distros / sendmail versions
- working on default SuSE 7.2 (sendmail 8.11.3):
- also included working parameters for SuSE 6.4 with *custom
compiled* sendmail 8.11.2:
- allows to give offset in command line. Use with 'smxploit' script
(also included) in order to find correct offset. This will be
necessary in different distros / sendmail versions
- QUICK GUIDE for finding propper exploitation values (VECT, GOT and
OFFSET):
==> CASE A: Non-stripped binary:
==> CASE B: Stripped binary (this is the default on several distros):
Please read complete alsou2.c comment lines for the whole
explanation.
Regards,
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
** RoMaN SoFt / LLFB **
roman () madrid com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Attachment:
alsou2.tar.gz
Description: SuSE 7.2 (& others) sendmail local xploit
Current thread:
- SuSE 7.2 (& others) sendmail local xploit RoMaN SoFt / LLFB!! (Aug 26)
