pmpost - another nice symlink follower

Hi, there is a symlink handling problem in the pcp suite from SGI. The binary pmpost will follow symlinks, if setuid root this leads to instant root compromise, as found on SuSE 7.1 I doubt that this a default SuSE package, though. Attached a simple C source to demonstrate this gcc pm.c -o pm the...

SGI Performance Co-Pilot 2.1.x2.2 - pmpost Symbolic Link

SGI Performance Co-Pilot 2.1.x2.2 - pmpost Symbolic Link // source: https://www.securityfocus.com/bid/2887/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open...