retard@aghadiry1:~/httpdocs/exploits$ cat * | grep 2.4 ts[0] = 0x12341234; ts[0] = 0x12341234; ts[0] = 0x12341234; qobaiashi@voyager:~> ./ong_bak -1002341 qobaiashi@voyager:~> ./ong_bak -10023411 "\xc7\x80\x04\x02\x00\x00\x00" // movl $0x0,0x204(%eax) char buf[2048]; printf(" | SuSE 9.1: -10023411 \n"); * pwned.c - linux 2.4 and 2.6 sys_uselib local root exploit. PRIVATE. /* this should roughly cover 2.4* and 2.6* */ /* 2.4 goes thru dentry */ /* prepare mmappings for both 2.4 and 2.6 */ /* mapping on 2.4 requieres only having mapping consisting of empty lists */ * 2.4 (CAN-2004-0497). * Linux 2.4.x < 2.4.27-rc3 (on nfs exported files) [tested] * Cyrus imapd 2.2.4 - 2.2.8 remote exploit by crash-x * printf("[!] Cyrus imapd 2.2.4 - 2.2.8 remote exploit v1.0 by crash-x\n"); * Linux kernel 2.4 uselib() privilege elevation exploit. * to race successfully. The exploit still works only on 2.4 series. * It should be also works on 2.4 SMP, but not easy. // SecWatch.org - 27/01/2005 [MD5:7d1888194c26d9c12a40a81c1aa3e184] retard@aghadiry1:~/httpdocs/exploits$