[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] ProFTPD-1.2.9rc2 remote root exploit
- To: <full-disclosure@lists.netsys.com>
- Subject: Re: [Full-Disclosure] ProFTPD-1.2.9rc2 remote root exploit
- From: "Larry W. Cashdollar" <lwc@vapid.ath.cx>
- Date: Fri, 24 Oct 2003 12:24:24 -0400 (EDT)
On Fri, 24 Oct 2003, Philipp Buehler wrote:
> If shellcode matches 0x72, 0x6d, 0x2d and 0x66 .. always be "alerted" :>
Also, if the exploit requires root and it's only calling connect()
thats another tip off.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html