OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Florian Weimer (WeimerCERT.Uni-Stuttgart.DE)
Date: Thu Apr 25 2002 - 13:07:25 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Bill Weiss <houdininmt.edu> writes:

    > Oh? What about (as the original poster said) if you have user directories
    > mounted as noexec? tmp as well? Where would you copy the file to so it
    > could exec?

    You could patch it into the memory of an existing process using /proc
    and Perl. Or you could reimplement its functionality in Perl, or even
    shell scripts.

    -- 
    Florian Weimer 	                  WeimerCERT.Uni-Stuttgart.DE
    University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
    RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898