[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] PoC Malicious GKrellM2 System Monitor Plugin



On Ubuntu I had to uninstall openbsd's version of netcat and use traditional
netcat because openbsd's version (Ubuntu's by default I think) doesn't have
the -e switch.  It's probably like this in a lot of distros now for security
reasons.  Run make and put the .so in your plugins directory, then restart
GKrellM and then enable the plugin, once the plugin is enabled, click to go
configure it and GKrellM should crash, dropping a shell at port 6666.  If a
user was tricked by an attacker into using a malicious plugin of this type,
the system could be compromised.

Attachment: gkrellm2-plugin-PoC.tar.gz
Description: GNU Zip compressed data

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/