local exploits :: six billion people can be wrong


node:	local exploits
template:	2
parent:	arxiv
owner:	maniac
viewed by:
created:	13.03.2004 - 20:55:08

cwbe coordinatez:
101
1
102
632138
636111

ABSOLUT
KYBERIA

permissions
you:	r,
system:	moderated
net:	yes

..............

000001010000000100000102006321380063611100636135

maniac 13.03.2004 - 21:14:30 level: 1 UP New
isec-mremap2

Synopsis: Linux kernel do_mremap VMA limit local privilege escalation
vulnerability
Product: Linux kernel
Version: 2.2 up to and including 2.2.25, 2.4 up to to and including 2.4.24,
2.6 up to to and including 2.6.2
CVE: CAN-2004-0077
Author: Paul Starzetz
Date: March 1, 2004
000001010000000100000102006321380063611100636131

maniac 13.03.2004 - 21:12:07 level: 1 UP New
isec-mremap

Linux kernel mremap() bound checking bug exploit.

Bug found by Paul Starzetz
000001010000000100000102006321380063611100636129

maniac 13.03.2004 - 21:08:55 level: 1 UP New
iosmash2

Proof Of Concept exploit for the Freebsd file descriptors bug. Freebsd thought they fixed this months ago well guess again :P Thanks to the Freebsd kernel you may now enjoy local root on all freebsd <=4.6 ;)
000001010000000100000102006321380063611100636127

maniac 13.03.2004 - 21:07:18 level: 1 UP New
dobrk-hatorihanzo

Linux kernel do_brk vma overflow exploit.

The bug was found by Paul (IhaQueR) Starzetz

Further research and exploit development by
Wojciech Purczynski and Paul Starzetz.

(compile with -static)
000001010000000100000102006321380063611100636126

maniac 13.03.2004 - 21:05:58 level: 1 UP New
epcs2-ptrace-lst

epcs2 (improved by lst [liquid@dqc.org])
000001010000000100000102006321380063611100636125

maniac 13.03.2004 - 21:05:00 level: 1 UP New
epcs-ptrace

exploit for execve/ptrace race condition in Linux kernel up to 2.2.18
000001010000000100000102006321380063611100636123

maniac 13.03.2004 - 21:03:57 level: 1 UP New
nergal-marwin-ptrace

by Nergal, modified by Marwin
000001010000000100000102006321380063611100636120

maniac 13.03.2004 - 21:01:30 level: 1 UP New
nergal-ptrace

another linux ptrace exploit
000001010000000100000102006321380063611100636115

maniac 13.03.2004 - 20:56:54 level: 1 UP New
isec-ptrace

This code exploits a race condition in kernel/kmod.c, which creates kernel thread in insecure manner. This bug allows to ptrace cloned process, allowing to take control over privileged modprobe binary.