| New User, Welcome! Login |
Overland Guardian OS CLI command line bug - let you get uid 0 shell
| From: |
trompele gmail com |
| To: |
bugtraq securityfocus com |
| Cc: |
|
| Subject: |
Overland Guardian OS CLI command line bug - let you get uid 0 shell |
| Date: |
Tue - Oct 20, 2009 02:53 AM |
Device: Snap Server 410
OS: GuardianOS 5.1.041
Description: When logged in to CLI via ssh as admin (uid=1) you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files (ie. less /tmp/top.log) and type in '!/bin/sh'. This will give you direct access to sh shell with UID 0. Tested only on OS version as above.
|
|
|
Copyright © 1995-2012 LinuxRocket.net. All rights reserved.
Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!
