Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LuxMan执行gzip路径处理不正确漏洞
Vulnerability Description
Frank McIngvale's LuxMan是一款基于LINUX下的游戏程序。 LuxMan执行gzip的时候没有使用全路径，本地攻击者可以利用这个漏洞建立包含恶意代码的命令为gzip的程序，通过修改路径环境变量，读写访问/dev/mem，造成权限提升。 LuxMan程序以suid属性安装，它在执行gzip的时候路径检查不够充分，本地攻击者如果建立一个名为gzip的木马或者恶意利用代码程序，并通过修改路径(PATH)环境变量，可导致复制/dev/mem内容到/tmp/mem文件中，攻击者可以查看文件内
CVSS Information
N/A
Vulnerability Type
N/A