CVE-2012-6348

CVE-2012-6348 affects Centrify Deployment Manager 2.1.0.283 (as distributed in Centrify Suite before 2012.5). Affected component is the use of insecure temporary files that can be targeted via symlink attacks: adcheckDMoutput and centrify.cmd.0. Local attackers can overwrite arbitrary files and, ...

Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root

/Local root exploit for Centrify Deployment Manager v2.1.0.283 local root, Centrify released a fix very quickly - nice vendor response. http://vapid.dhs.org/exploits/centrifylocalr00t.c CVE-2012-6348 12/17/2012 http://vapid.dhs.org/advisories/centrifydeploymentmanagerinsecuretmp2.html Greetings...

Centrify Deployment Manager 2.1.0.283 Local Root

/Local root exploit for Centrify Deployment Manager v2.1.0.283 local root, Centrify released a fix very quickly - nice vendor response. CVE-2012-6348 12/17/2012 http://vapid.dhs.org/advisories/centrifydeploymentmanagerinsecuretmp2.html Greetings vladz, Thanks for the inotify & syscall technique...