[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Full-Disclosure] ProFTPD-1.2.9rc2 remote root exploit
- To: full-disclosure@lists.netsys.com
- Subject: RE: [Full-Disclosure] ProFTPD-1.2.9rc2 remote root exploit
- From: amebix@comcast.net
- Date: Fri, 24 Oct 2003 15:09:23 +0000
I dont know about 'decrypting' it but from what I can tell yes it is launched
locally. I doubt this is a legitimate 0 day, it does look like evil code
however. I would not run this on a system you cant rebuild.
>The shellcode seems to be locally launched. Anybody to "decrypt" the
>shellcode ?
chris
chris@cr-secure.net
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html