[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability
- From: Marco Ivaldi <raptor@xxxxxxxxxxxxxxx>
- Date: Fri, 13 Oct 2006 21:21:27 +0200 (CEST)
On Wed, 11 Oct 2006, iDefense Labs wrote:
> III. ANALYSIS
>
> Exploitation allows local attackers to elevate privileges to root.
http://www.0xdeadbeef.info/exploits/raptor_libnspr
Oldschool style;)
I'll probably code a universal exploit using /etc/ld.so.preload on next
week... But now the week-end has landed!
--
Marco Ivaldi
Antifork Research, Inc. http://0xdeadbeef.info/
3B05 C9C5 A2DE C3D7 4233 0394 EF85 2008 DBFD B707
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/