pi3 blog

bughunt exploiting

• Home
• About

“Spojrz na czlowieka... i zobacz czlowieka... Ja nie zawsze potrafie...”

~Adam 'pi3' Zabrocki

• Subscribe

  

• Categories

  • Bughunt
  • Exploiting
  • Ideas
  • Meeting
  • O wszystkim i o niczym

• Archives

  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009

• Friends

  • ajafo
  • Bothunters – Borys Łącki
  • buz
  • carstein
  • Dominik Szybowski
  • Gynvael Coldwind
  • Icewall
  • j00ru
  • Piotr Bania
  • rezos
  • solaris
  • thorkill

• Admin

  • Log in

28th of February I had a IT group meeting.  On this meeting I had been giving lecture about modern rootkits, virus and malwares for 1 hour. The presentation give a point for malware called bankers, attacks for device (skimming), new attack for CHIP cards, and how rootkits hide in *NIX systems. I have had really positive feedback so I’m happy that people likes my talking Personally I think it wasn’t bad

I can’t publish my presentation but if you know me I can talk with you about my topic of lecture

Best regards,

Adam Zabrocki

CERN openlab / Intel Computer Architecture and Performance Tuning Workshop Winter 2010… From 9:00 (9th of February) until 17:00 (10th of February) openlab are filled by people who wants to learn smth from Intel’s guys… At the beginning I want to say that one of the speaker will be Polish guy – Andrzej Nowak. Here is short plan of lectures:

CVE-2010-0010: Apache mod_proxy vulnerability

After contact with Apache security team i can publish new advisory. This bug exists only in apache 1.3 version in mod_proxy modules, only in 64 bits architecture.

I would like to thanks Colm MacCárthaigh – the guy responsible for contact with me and patch this hole.

Bugfix is available in a forthcoming version of Apache 1.3.x.

If you have any question just contact with me. Advisory is avaible here:

This will be very short post… I have found (few months ago) security vulnerability in one of Apache server/module. I contact with apache security team. After few days I will decide about “future” of this bug – publish or wait for security path and publish after it. Now I can paste here simple output from gdb:

More than year ago I was publish advisory in ‘mtr’ software. I think, personally, it is great bug because it can’t exist without unspecified situation in  libresolv library The question is why have I written information about it on blog?

I forgot add this advisory in my site (sic!) Now it’s ok and you can find this advisory here.

I attached to this advisory details and Proof Of Concept. If you haven’t read it yet i strongly recommend you to do it because it shows that sometimes if  we read source code we think bug doesn’t exists but sometimes other external stuff/bugs/unspecified situation help us to trigger and exploit unexisting bug

Is it a dream? Impossible? Bugs in CPU? No… it’s reality! CPU is only a piece of hardware. Everything have bugs… CPU too. I will give here only a piece of information about bugs in INTEL products…

OK. I haven’t written long time on blog. Today I want to show you what sometimes
yum can do without your knowledge. Few days ago I was upgrading one of system using yum.
Everything looked fine. I was happy that sometimes yum is useful. After work I went sleep
and next day I received messages that smth is fu** up with www…

CERN – The European Organization for Nuclear Research…

Now I have more time so I can write something more about my job…

CERN – The European Organization for Nuclear Research…

Last few weeks I was talking(mailing) with Derek (xpdf developer – btw. really nice guy) about some vulnerabilities in his product. 14th of October he published path for bugs (not only my vulnerabilites) so i decide to release advisory…