Attention A Nwe Local Root Exploit

[t4y4n]

HI ALL
THIS LINK local root exploit (http://www.milw0rm.com/exploits/5979) IS A NEW EXPLOIT FOR OPENBSD BOXES
I SEE THE FILM >> IT WORKS

BE CAREFUL TO PERMS FOR EXECUATION

[Carpetsmoker]

The movie is here:
http://lul-disclosure.net/lulz/openbsdjizz-the_movie.html

Not quite work safe btw...
Also, it's flash ...

Oh, and what a childish guy ...

[BSDfan666]

OpenBSD 4.0? isn't that discontinued anyway? they exploited something *already* fixed by the developers in a newer release?

How lame is that? personally, I think that guy should be jailed.. and the "milworm" site shut down, as Carpetsmoker said, they're children that definitely need to be disciplined.

[Carpetsmoker]

Does this only work for OpenBSD 4.0? haha, even *I* can find exploits this way ;)

[t4y4n]

humm i think test needed :d

[BSDfan666]

It does not work on OpenBSD 4.3, at the sysctl call OpenBSD prints "Operation not supported" to stderr.

It does display some scrolling text video, but that's not an exploit and can be done by anyone.. ;)

Test environment: QEMU with -net none option..

[jggimi]

The flash went by so fast (under gnash) that I could only get a glimpse, and what I saw of it looked eerily similar to another faked "exploit" of a machine named "theo<something>...@openbsd.org" from about a decade ago. If this is the same person, then I assume they haven't aged a day in that time.