From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <3EC9EBBE.2080406@ameritech.net> From: northern snowfall User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:0.9.4.1) Gecko/20020518 Netscape6/6.2.3 MIME-Version: 1.0 To: 9fans@cse.psu.edu Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: [9fans] 127 Research and Development: 127 Day! Date: Tue, 20 May 2003 03:47:58 -0500 Topicbox-Message-UUID: b4058948-eacb-11e9-9e20-41e7f4b1d025 Thought this might be interesting considering our recent discussion regarding Exception Handling: Every year, 127 Research chooses an interesting topic, presenting it to our correspondants just to keep them up-to-date with our vastly increasing prowess and drive. This year will be the first we bring the public our yearly analysis. Focused on topics that challenge an analyst's skill, 127 Day releases display our level of ability in auditing, exploitation, theory, and more. This year, 2003, represents 127 Research and Development's first public 127-Day release! Our release covers the remote exploitation of the prescan memory corruption vulnerability found in versions of Sendmail earlier than 8.12.9. In the paper, Don Bailey touches on some interesting techniques not yet seen in public. One of these techniques is the misaligned-opcode method of text segment manipulation. The paper is viewable online in HTML format, as well as down- loadable in portable Postscript. The exploit interface described in the report is also available at 127's website. http://www.7f.no-ip.com http://deadchildren.org Enjoy! Don Bailey 127 Research and Development