SDFingerD Failure To Drop Privileges Local Privilege Escalation Vulnerability
BID:7977
Info
SDFingerD Failure To Drop Privileges Local Privilege Escalation Vulnerability
| Bugtraq ID: | 7977 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 19 2003 12:00AM |
| Updated: | Jun 19 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Vade 79 <[email protected]>. |
| Vulnerable: |
schmolze studios sdfingerd 1.1 |
| Not Vulnerable: | |
Discussion
SDFingerD Failure To Drop Privileges Local Privilege Escalation Vulnerability
sdfingerd has been reported prone to a local privilege escalation vulnerability. The issue presents itself because the sdfingerd daemon fails to sufficiently drop group privileges before executing commands that are contained in a users .plan file.
sdfingerd has been reported prone to a local privilege escalation vulnerability. The issue presents itself because the sdfingerd daemon fails to sufficiently drop group privileges before executing commands that are contained in a users .plan file.
Exploit / POC
SDFingerD Failure To Drop Privileges Local Privilege Escalation Vulnerability
The following proof of concept exploit has ben provided:
The following proof of concept exploit has ben provided:
References
SDFingerD Failure To Drop Privileges Local Privilege Escalation Vulnerability
References:
References:
- sdfingerd (schmolze studios)