OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability

From: Marco Ivaldi (raptor0xdeadbeef.info)
Date: Fri Oct 13 2006 - 14:21:27 CDT


On Wed, 11 Oct 2006, iDefense Labs wrote:

> III. ANALYSIS
>
> Exploitation allows local attackers to elevate privileges to root.

http://www.0xdeadbeef.info/exploits/raptor_libnspr

Oldschool style;)

I'll probably code a universal exploit using /etc/ld.so.preload on next
week... But now the week-end has landed!

--
Marco Ivaldi
Antifork Research, Inc. http://0xdeadbeef.info/
3B05 C9C5 A2DE C3D7 4233 0394 EF85 2008 DBFD B707