[bglug] Potential Local Root Exploit (Artswrapper)

Diego Tironi bglug@lists.linux.it
Mon, 8 Jul 2002 21:03:22 +0200


# fartsy.pl by kanix <kanix@0xfee1dead.net>
# /usr/sbin/artswrapper <local format string exploit>
# Tested on Red Hat Linux release 7.2 (Enigma)


artswrapper non e' suid di default su rh 7.2
quindi l'exploit non ritorna una root shell.

-- 
Diego Tironi - diegotironi@katamail.com - Bergamo
PGP DH/DSS Key ID: 0x0F752EF8
Fingerprint: 36BF 20FB 45D7 165E 5041  6E4E 79F5 97CE 0F75 2EF8
Veritas vos liberabit