Telnet/SSH Command Injection через PTrace (эксплоит)

[root@localhost root]# gcc -o onelove onelove.c
onelove.c:256:2: warning: pasting "(" and "buf" does not give a valid preprocessing token
onelove.c:256:2: warning: pasting "(" and "buf" does not give a valid preprocessing token
onelove.c:308:2: warning: pasting "(" and "buf" does not give a valid preprocessing token
onelove.c:308:2: warning: pasting "(" and "buf" does not give a valid preprocessing token
onelove.c:548:10: warning: pasting "(" and "count" does not give a valid preprocessing token
onelove.c:548:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:548:10: warning: pasting "?" and "count" does not give a valid preprocessing token
onelove.c:548:10: warning: pasting "(" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:548:10: warning: pasting "(" and "count" does not give a valid preprocessing token
onelove.c:548:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:548:10: warning: pasting ":" and "count" does not give a valid preprocessing token
onelove.c:549:8: warning: pasting "(" and "len" does not give a valid preprocessing token
onelove.c:549:8: warning: pasting "(" and "len" does not give a valid preprocessing token
onelove.c:549:8: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:576:10: warning: pasting "(" and "count" does not give a valid preprocessing token
onelove.c:576:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:576:10: warning: pasting "?" and "count" does not give a valid preprocessing token
onelove.c:576:10: warning: pasting "(" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:576:10: warning: pasting "(" and "count" does not give a valid preprocessing token
onelove.c:576:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:576:10: warning: pasting ":" and "count" does not give a valid preprocessing token
onelove.c:577:8: warning: pasting "(" and "len" does not give a valid preprocessing token
onelove.c:577:8: warning: pasting "(" and "len" does not give a valid preprocessing token
onelove.c:577:8: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token
onelove.c:638:1: warning: no newline at end of file
onelove.c: In function `memread':
onelove.c:548: `WORD_SIZE' undeclared (first use in this function)
onelove.c:548: (Each undeclared identifier is reported only once
onelove.c:548: for each function it appears in.)
onelove.c: In function `memwrite':
onelove.c:576: `WORD_SIZE' undeclared (first use in this function)

Логин:
Пароль:
	Запомнить меня на этом компьютере

Забыли свой пароль?

Гость Guest	#1 Это нравится:0 Да/0 Нет 21.09.2003 17:44:15 Обсуждение статьи Telnet/SSH Command Injection через PTrace (эксплоит)

Moonsoft Guest	#2 Это нравится:0 Да/0 Нет 21.09.2003 17:44:15 Чтойто этот эксплоит не компилируется!!![IMG]http://www.securitylab.ru/forum/smileys/smiley7.gif[/IMG] [IMG]http://www.securitylab.ru/forum/smileys/smiley7.gif[/IMG] [IMG]http://www.securitylab.ru/forum/smileys/smiley7.gif[/IMG]

Гость Guest	#3 Это нравится:0 Да/0 Нет 21.09.2003 19:29:39 Глупости, замечательно компилируется. linux gcc version 2.95.4 Осталось только машину с ptrace уязвимостью найти.

Moonsoft Guest	#4 Это нравится:0 Да/0 Нет 24.09.2003 20:01:31 [root@localhost root]# gcc -o onelove onelove.c onelove.c:256:2: warning: pasting "(" and "buf" does not give a valid preprocessing token onelove.c:256:2: warning: pasting "(" and "buf" does not give a valid preprocessing token onelove.c:308:2: warning: pasting "(" and "buf" does not give a valid preprocessing token onelove.c:308:2: warning: pasting "(" and "buf" does not give a valid preprocessing token onelove.c:548:10: warning: pasting "(" and "count" does not give a valid preprocessing token onelove.c:548:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:548:10: warning: pasting "?" and "count" does not give a valid preprocessing token onelove.c:548:10: warning: pasting "(" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:548:10: warning: pasting "(" and "count" does not give a valid preprocessing token onelove.c:548:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:548:10: warning: pasting ":" and "count" does not give a valid preprocessing token onelove.c:549:8: warning: pasting "(" and "len" does not give a valid preprocessing token onelove.c:549:8: warning: pasting "(" and "len" does not give a valid preprocessing token onelove.c:549:8: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:576:10: warning: pasting "(" and "count" does not give a valid preprocessing token onelove.c:576:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:576:10: warning: pasting "?" and "count" does not give a valid preprocessing token onelove.c:576:10: warning: pasting "(" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:576:10: warning: pasting "(" and "count" does not give a valid preprocessing token onelove.c:576:10: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:576:10: warning: pasting ":" and "count" does not give a valid preprocessing token onelove.c:577:8: warning: pasting "(" and "len" does not give a valid preprocessing token onelove.c:577:8: warning: pasting "(" and "len" does not give a valid preprocessing token onelove.c:577:8: warning: pasting "%" and "WORD_SIZE" does not give a valid preprocessing token onelove.c:638:1: warning: no newline at end of file onelove.c: In function `memread': onelove.c:548: `WORD_SIZE' undeclared (first use in this function) onelove.c:548: (Each undeclared identifier is reported only once onelove.c:548: for each function it appears in.) onelove.c: In function `memwrite': onelove.c:576: `WORD_SIZE' undeclared (first use in this function)