Bugtraq mailing list archives

Re: Sendmail local root exploit on linux 2.2.x

From: grenier () NEF ESIEA FR (Christophe GRENIER)
Date: Thu, 8 Jun 2000 23:49:12 +0200


A little script to exploit this bug...

-------------------------------------------------------------------------------
  ,-~~-.___.     ._.                       -= GRENIER Christophe =-
 / |  '     \    | |"""""""""|              sysadm de nef.esiea.fr
(  )         0   | |         |                     ESIEA
 \_/-, ,----'    | |         |          Ecole Superieure d'Informatique -
    ====         !_!--v---v--"          Electronique - Automatique
    /  \-'~;      |""""""""|
   /  __/~| ._-""||        |            Email: grenier () esiea fr
 =(  _____|_|____||________| http://www.esiea.fr/public_html/Christophe.GRENIER/
-------------------------------------------------------------------------------

<HR NOSHADE>
<UL>
<LI>APPLICATION/x-sh attachment: bug_kernel.sh
</UL>

Current thread:

Sendmail local root exploit on linux 2.2.x Florian Heinz (Jun 08)
- Snort 1.6 and nmap 2.54beta1 Galileo (May 12)
  - Re: Snort 1.6 and nmap 2.54beta1 Simple Nomad (Jun 14)
  - Security Advisory: REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON Tom Yu (Jun 14)
  - Security Advisory: local ROOT exploit in BRU Technical Support (Jun 14)
  - Re: Snort 1.6 and nmap 2.54beta1 Martin Roesch (Jun 14)
- Re: Sendmail local root exploit on linux 2.2.x Mark K. Pettit (Jun 08)
- Reporting Security Issues to Microsoft Microsoft Security Response Center (Jun 08)
- Re: Sendmail local root exploit on linux 2.2.x Christophe GRENIER (Jun 08)
- arprelay: a tool to edit TCP connections in a LAN Felix von Leitner (Jun 09)
- Re: Sendmail local root exploit on linux 2.2.x Alan Iwi (Jun 12)
- Splitvt exploit syzop (Jun 14)
  - Re: Splitvt exploit Joey Hess (Jun 14)
    - Re: Splitvt exploit Andrey Savochkin (Jun 16)
    - Re: Splitvt exploit Joey Hess (Jun 16)
    - NAI WebShield SMTP does not scan base64 encoding chris.paget () ANALYSYS COM (Jun 20)
  - Re: Splitvt exploit Kris Kennaway (Jun 15)
  - Re-release of IIS 5.0 Patch for MS00-031 Microsoft Product Security (Jun 16)
  - Infosec.20000617.panda.a Ian Vitek (Jun 17)

(Thread continues...)