exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Jose Ramon Villa

Trendmicro IWSS 3.1 Privilege Escalation

Posted Oct 26, 2011

Authored by Jose Ramon Villa

A vulnerability was found in the software IWSS of TrendMicro that could allow an attacker to gain root access in the system. The binary "patchCmd" has sticky permissions for the "setuid" and "setgid" with the user root. The execution is allowed to all users. The code performs a setuid(0) before an a system() by that the execution will take root permissions regardless of user permissions.

tags | exploit, root

SHA-256 | 5c58e2ec89a7aa0742214e1aec3ff4472b0358ec1afdb3c3b4436e5f3f5fc91b

Download | Favorite | View