OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Przemyslaw Frasunek (venglinFREEBSD.LUBLIN.PL)
Date: Wed Mar 07 2001 - 15:17:47 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Mar 07, 2001 at 04:40:05AM +0100, Nomen Nescio wrote:
    > this is an exploit for wu-ftpd 2.6.1(1) on linux
    > propz to segv for giving this to me

    This is an old wuftpd 2.6.0 SITE EXEC exploit. 2.6.1 is not vulnerable
    to this attack.

    > strcpy (cmdbuf, "SITE EXEC ");
    > for (ret = 0; ret <= 88; ret++)
    > {
    > strcat (cmdbuf, "%x");
    > } 

    --
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE *
* Inet: przemyslawfrasunek.com ** PGP: D48684904685DF43EA93AFA13BE170BF *