exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

MDKSA-2004:091.txt

Posted Sep 10, 2004

Authored by Max Vozeler | Site mandrakesoft.com

Mandrake Linux Security Update Advisory - The cdrecord program, which is suid root, fails to drop euid=0 when it exec()s a program specified by the user through the RSH environment variable. This can be abused by a local attacker to obtain root privileges.

tags | advisory, local, root

systems | linux, mandrake

advisories | CVE-2004-0806

SHA-256 | 6f38c8ce8d76f1228e8d3ca2e1b81434d0f2613330175e2b3a098eeec3ceb160

Download | Favorite | View

Related Files

cdr_exp.sh

Posted Sep 10, 2004

Authored by newbug

Local root exploit for cdrecord, which fails to drop euid=0 when it exec()s a program specified by the user through the RSH environment variable.

tags | exploit, local, root

advisories | CVE-2004-0806

SHA-256 | 2871e27ea81a6a71a847badaf4a16cae0b8f374ea8a414b249ac51d9cffa940d

Download | Favorite | View