CVE-2005-0708

Related Files

FreeBSD-SA-05:02.sendfile Exploit

Posted Apr 1, 2011

Authored by Solar Designer

FreeBSD sendfile exploit that dumps password hashes to stdout.

tags | exploit

systems | freebsd

advisories | CVE-2005-0708

SHA-256 | f71653ab6e8d1fce31b24940aeaf94c9eb51feb74b98eb76e0d2d78d4969c5ee

Download | Favorite | View

FreeBSD-SA-05-02.sendfile.txt

Posted Apr 17, 2005

Authored by Sven Berkvens, Marc Olzheim | Site freebsd.org

FreeBSD Security Advisory FreeBSD-SA-05:02 - The sendfile(2) system call allows a server application (such as an HTTP or FTP server) to transmit the contents of a file over a network connection without first copying it to application memory. High performance servers such as Apache and ftpd use sendfile. If the file being transmitted is truncated after the transfer has started but before it completes, sendfile(2) will transfer the contents of more or less random portions of kernel memory in lieu of the missing part of the file.

tags | advisory, web, kernel

systems | freebsd

advisories | CVE-2005-0708

SHA-256 | f23b5fbf03b2582e71dc290dd2da453c3f35c25347c573b97a39ab6a5ff37a46

Download | Favorite | View