|
|
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Présentation : As you might have noticed, there has been some changes to JBrownSEC lately. I want to thank Stashbox for hosting our files which are available through the right side bar along with other news and information feeds. I hope these new additions and other slight changes benefit all our the readers out there.. I know I sure like them. I have also released some exploits recently including some memory leaks in Konqueror and a remote code execution for 3com's old tftp server, for fun. You also might have to play with the data amount on the 'link href' leak on Konqueror to make it less likely to recover, if at all. Netsurf also has some integer overflows and memory leaks in its rendering engine and such, the advisory and exploits are available now Check your favorite security site and or the right side info panel . A while back I discovered a xss-turned-cmd execution exploit utilizing Wscript, so not very reliable for Novell Netware's Remote Manager. Sometime thereafter I recieved an email from someone at Novell asking to work with me concerning this flaw. I would have helped more than I did, but at the time of my email my Netware server was down or something happened so I wasn't very helpful. Long email short, the person asking for information about the bug claimed that they could not reproduce it and, I suppose, dismissed it I think they were using Netware 6.5 SP7 and the bug was tested on my 6.5 SP6 server . But the bug is real. You can actually inject code for some session-wide action in the target browser. I was also fuzzing a version of ICEbrowser, the browser that Novell uses for Remote Manager and web surfing in general and found that I could trigger a fault and actually reboot the system. Note that this exploit is not completely reliable, it has shown signs of being fatal to the health of the server if continually faulted and rebooted over and over again. Abend 1 on P00 Server-5.70.06 Page Fault Processor Exception Error code 00000000 Registers CS 0008 DS 0010 ES 0010 FS 0010 GS 007B SS 0010 EAX 00000000 EBX 9687EF4C ECX 004EB8F0 EDX 000000E4 ESI 00000000 EDI 00000001 EBP 8D9E7F3C ESP 86179EF4 EIP 00000000 FLAGS 00010086 Access Location 0x00000000 Running process Interrupt service routine nested count 2 Interrupted process Server 12 Process Thread Owned by NLM SERVER.NLM Stack pointer 86179F60 OS Stack limit 86172020 CPU 0 Thread 89D24220 is in a NO SLEEP state Scheduling priority 67371008 Wait state 50500F0 Waiting for work Stack 002048F1 SERVER.NLMPerformCallOuts 105 --00000000 LOADER.NLMKernelAddressSpace 0 --000022B6 LOADER.NLMKernelAddressSpace 22B6 00214018 SERVER.NLMWorkerThread 344 --39252B31 --86179F6C 00227F55 SERVER.NLMSchedTimerISR 85 --00000000 LOADER.NLMKernelAddressSpace 0 --00000001 LOADER.NLMKernelAddressSpace 1 --00000000 LOADER.NLMKernelAddressSpace 0 -001337F0 LOADER.NLMinterruptVectorPool 0 -0013C570 LOADER.NLMkVirtualInterruptTable0 0 --00000010 LOADER.NLMKernelAddressSpace 10 0010818B LOADER.NLMkTimer1Interrupt 1D 001077E9 LOADER.NLMkProcessProtectedModeInterrupt 39 --00000000 LOADER.NLMKernelAddressSpace 0 -0013C570 LOADER.NLMkVirtualInterruptTable0 0 --00000000 LOADER.NLMKernelAddressSpace 0 --392529C6 00107147 LOADER.NLMkProtectedModeInterruptContinue 5F --00000010 LOADER.NLMKernelAddressSpace 10 --00000010 LOADER.NLMKernelAddressSpace 10 --00000010 LOADER.NLMKernelAddressSpace 10 --00000000 LOADER.NLMKernelAddressSpace 0 --00000000 LOADER.NLMKernelAddressSpace 0 --00000000 LOADER.NLMKernelAddressSpace 0 --FFA1276D --00000000 LOADER.NLMKernelAddressSpace 0 --839FE2A0 IDEATA.HAMIfYouSeeThisYoureWayPastTheIDEDriver 3BA0 --FDE3AF4A 00214018 SERVER.NLMWorkerThread 344 --00000008 LOADER.NLMKernelAddressSpace 8 --00000246 LOADER.NLMKernelAddressSpace 246 --00000000 LOADER.NLMKernelAddressSpace 0 --89D24220 JVM.NLM__fprem1_chk 1486 --00000000 LOADER.NLMKernelAddressSpace 0 --89D24220 JVM.NLM__fprem1_chk 1486 00221158 SERVER.NLMTcoNewSystemThreadEntryPoint 40 --89D24220 JVM.NLM__fprem1_chk 1486 --00000000 LOADER.NLMKernelAddressSpace 0 --00000000 LOADER.NLMKernelAddressSpace 0 --00000000 LOADER.NLMKernelAddressSpace 0 --00000000 LOADER.NLMKernelAddressSpace 0 --00007F80 LOADER.NLMKernelAddressSpace 7F80 --00000000 LOADER.NLMKernelAddressSpace 0 --8616904C 003682FE SERVER.NLMSwitchStacksAndCall 44 --FE00B0A0 LOADER.NLMOSAllocMemory B0A0 --8616FF48 --00002088 LOADER.NLMKernelAddressSpace 2088 --34343434 --65657246 --65657246 --65657246 --65657246 --65657246 --65657246 --65657246 --34343434 --65657246 --65657246 --65657246 --65657246 --65657246 --65657246 --65657246 --65657246 Stack dump exceeded the valid memory limit Additional Information The hardware detected a problem while executing an interrupt service routine. The code being executed is owned by SERVER.NLM. It may be the source of the problem or there may have been a memory corruption. Memory at EAX Invalid dump address Memory at EBX 9687EF4C 00000000 00000000-00000000 00000000 .... .... .... .... 9687EF5C 00000000 00000000-00000000 464C4143 .... .... .... FLAC 9687EF6C 00000000 00000000-00000000 00000000 .... .... .... .... 9687EF7C 00000000 00000000-00000000 00000000 .... .... .... .... 9687EF8C 00000000 000003E8-85E53B00 000003E8 .... ...h .e . ...h 9687EF9C 00000000 00000246-00000003 856E6F0D .... ...F .... .no. 9687EFAC FE2756A0 000003E8-C188BFC0 00000000 'V ...h A. .... 9687EFBC 00000000 000003E8-00000002 00000246 .... ...h .... ...F 9687EFCC 8C027090 00000000-0000000C FE2756A0 ..p. .... .... 'V 9687EFDC 00000000 00000000-8B377420 00000003 .... .... .7t .... 9687EFEC 855EC6C0 00000246-00000000 00000002 . F ...F .... .... 9687EFFC 8B377508 00000008-00000000 0000002F .7u. .... .... ... 9687F00C C188BFC0 00000000-856F2E28 0000002F A. .... .o. ... 9687F01C C188BFC0 00000000-00000000 C188CFC8 A. .... .... A.OH 9687F02C 9687F030 00261EE6-00000000 00000008 ..p0 . .f .... .... 9687F03C 00000000 00000000-856FBB8D 0000002F .... .... .o . ... Memory at ECX 004EB8F0 00000000 00000000-00000000 00000000 .... .... .... .... 004EB900 DA381B1E 00000658-FE00AD00 00000000 Z8.. ...X .-. .... 004EB910 00000000 00000000-00000000 00000000 .... .... .... .... 004EB920 00000000 00000000-00000000 EC51D54E .... .... .... lQUN 004EB930 00000000 00000000-00000000 00000000 .... .... .... .... 004EB940 00000000 00000000-00000000 FE001900 .... .... .... ... 004EB950 00000008 FE001B9C-942A64DC 00000124 .... ... . d ... 004EB960 01031618 00000000-00000000 00000000 .... .... .... .... 004EB970 00000000 00000000-FE0AD980 99D29EC0 .... .... .Y. .R. 004EB980 00001018 01031618-00000000 00000000 .... .... .... .... 004EB990 00000000 00000000-00000000 FE004084 .... .... .... . . 004EB9A0 9A09A744 00004A1B-01031618 00000000 ..'D ..J. .... .... 004EB9B0 00000000 00000000-00000000 00000000 .... .... .... .... 004EB9C0 004EB9BC 8DFA1978-99A392BC 002091D0 .N97X .... . Y. 8D9E7FDC 9619C180 00000000-00221158 9619C180 ..A. .... . .X ..A. 8D9E7FEC 8C295900 00000000-00000000 00000000 . Y. .... .... .... 8D9E7FFC 34343434 - 4444 Pointer exceeds valid memory limit Memory at ESP 86179EF4 002048F1 00000000-000022B6 00214018 . Hq .... .. 6 . . 86179F04 39252B31 86179F6C-00227F55 00000000 9pourcents 1 ...l . .U .... 86179F14 00000001 00000000-001337F0 0013C570 .... .... ..7p ..Ep 86179F24 00000010 0010818B-001077E9 00000000 .... .... ..wi .... 86179F34 0013C570 00000000-392529C6 00107147 ..Ep .... 9pourcents F ..qG 86179F44 00000010 00000010-00000010 00000000 .... .... .... .... 86179F54 00000000 00000000-FFA1276D 00000000 .... .... . 'm .... 86179F64 839FE2A0 FDE3AF4A-00214018 00000008 ..b c J . . .... 86179F74 00000246 00000000-89D24220 00000000 ...F .... .RB .... 86179F84 89D24220 00221158-89D24220 00000000 .RB . .X .RB .... 86179F94 00000000 00000000-00000000 00007F80 .... .... .... .... 86179FA4 00000000 8616904C-003682FE FE00B0A0 .... ...L .6. .0 86179FB4 8616FF48 00002088-34343434 65657246 ...H .. . 4444 eerF 86179FC4 65657246 65657246-65657246 65657246 eerF eerF eerF eerF 86179FD4 65657246 65657246-34343434 65657246 eerF eerF 4444 eerF 86179FE4 65657246 65657246-65657246 65657246 eerF eerF eerF eerF Stack Walk Current EIP 00000000 Stack Contents EIP invalid. I have decided to release bf2, but no release date has been set yet. I am now and will be open for suggestions after Browser Fuzzer 2 is released, to take into consideration for bf3, which I plan to begin working on in the near future. Bug on
Les derniers articles du site "Jeremy's Computer Security Blog" :
- What did they fix
- Adobe Flash Temporary Filename Scheme
- Reverse Engineering File Formats
- Browser Fuzzer 3
- Writing Code that Breaks Code
- Mozilla Code sighs
- From Static Analysis to 0day Exploit
- Some vendors are 'unconcerned'
- Firefox Local Download Manager Vulnerability
- Desktop Management Interface DMI
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
