Re: [Full-disclosure] ntpd stack evasion exploit

2006-01-14 Thread Dude VanWinkle
On 1/10/06, !bSt bitwarz Security Team [EMAIL PROTECTED] wrote: We are a cell of pr0j3kt m4yh3m in Latin America and western Europe. -snip- --ntpd_stack_evasion.c-- /* ntpd remote root no-exec stack evasion spl0it -snip- I thought pr0j3kt m4yh3m and the PHC were promoting non-disclosure. I

[Full-disclosure] ntpd stack evasion exploit

2006-01-10 Thread !bSt bitwarz Security Team
We are a cell of pr0j3kt m4yh3m in Latin America and western Europe.We have owned many research centers in Latin America, for example the ntp server at Observatorio Nacional, USP and UFRJ, in Brazil, home of our member ronaldinh0 and in many european universities,specially those ones knownby their

Re: [Full-disclosure] ntpd stack evasion exploit

2006-01-10 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 this is s lol , nice lookup Przemyslaw Przemyslaw Frasunek wrote: !bSt bitwarz Security Team napisaƂ(a): /* ntpd remote root no-exec stack evasion spl0it * by m0sk0v well... stolen code from my exploit (and advisory) published almost five

Re: [Full-disclosure] ntpd stack evasion exploit

2006-01-10 Thread Sean Crawford
Wednesday, January 11, 2006 9:30 AM Stan Bubrouski wrote. (no offense intended, this is a list to discuss the full disclosure of vulnerabilities). And judging from the original email I would say the Federal Reserve Bank of Minneapolis may well be full of said vulnerabilities.

Re: [Full-disclosure] ntpd stack evasion exploit

2006-01-10 Thread George A. Theall
On Wed, Jan 11, 2006 at 12:29:35PM +1100, Sean Crawford wrote: And judging from the original email I would say the Federal Reserve Bank of Minneapolis may well be full of said vulnerabilities. Just the fact a bank employee is posting on a public list asking for help is insane, but this