CVE-2003-0947

// (if the iwconfig executable is setuid) /str0ke #include <stdioh> #include <stringh> #include <unistdh> #include <stdlibh> /* 45 Byte /bin/sh >> wwwmilw0rmcom/idphp?id=1169 (wwwexploit-dbcom/exploits/1169/) */ char shellcode[]= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f" ...

source: wwwsecurityfocuscom/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline Because of this, a local attacker may be able to gain elevated privileges /* Name: iw-configc Copyright: !sh2k+!tc2k Author: heka Date: 11/11/2003 Greets: bx, pintos, eksol, hex, keyhook, ...

source: wwwsecurityfocuscom/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline Because of this, a local attacker may be able to gain elevated privileges Exploit: /* PST_iwconfig /sbin/iwconfig proof of concept exploit coded by aXis@ph4nt0mnet Ph4nt0m Security Team ...

source: wwwsecurityfocuscom/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline Because of this, a local attacker may be able to gain elevated privileges /* * (C) 2003 NrAziz * polygrithm_at_hotmail[DOT]com */ /* * Greetz to Mixter,gorny,rave */ /* * Description: * ...