Limited Shell Multiple Local Security Bypass Vulnerabilities
BID:38616
Info
Limited Shell Multiple Local Security Bypass Vulnerabilities
| Bugtraq ID: | 38616 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 09 2010 12:00AM |
| Updated: | Mar 09 2010 12:00AM |
| Credit: | Adrien Urban |
| Vulnerable: |
Limited Shell Limited Shell 0.9.8 |
| Not Vulnerable: |
Limited Shell Limited Shell 0.9.9 |
Discussion
Limited Shell Multiple Local Security Bypass Vulnerabilities
Limited Shell is prone to multiple local security-bypass vulnerabilities.
Attackers may exploit these issues to bypass the path restriction functionality and perform unauthorized actions.
Versions prior to Limited Shell 0.9.9 are vulnerable.
Limited Shell is prone to multiple local security-bypass vulnerabilities.
Attackers may exploit these issues to bypass the path restriction functionality and perform unauthorized actions.
Versions prior to Limited Shell 0.9.9 are vulnerable.
Exploit / POC
Limited Shell Multiple Local Security Bypass Vulnerabilities
To exploit these issues, an attacker requires local, interactive access to an affected computer.
To exploit these issues, an attacker requires local, interactive access to an affected computer.
Solution / Fix
Limited Shell Multiple Local Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Limited Shell Limited Shell 0.9.8
Solution:
Updates are available. Please see the references for more information.
Limited Shell Limited Shell 0.9.8
-
Limited Shell lshell-0.9.10.tar.gz
https://sourceforge.net/projects/lshell/files/lshell/0.9.10/lshell-0.9 .10.tar.gz/download
References
Limited Shell Multiple Local Security Bypass Vulnerabilities
References:
References:
- Limited Shell Changelog (Limited Shell)
- Limited Shell Homepage (Limited Shell)