Home page logo
/

bugtraq logo Bugtraq mailing list archives

Overland Guardian OS CLI command line bug - let you get uid 0 shell
From: trompele () gmail com
Date: Tue, 20 Oct 2009 03:47:53 -0600

Device: Snap Server 410
OS: GuardianOS 5.1.041
Description: When logged in to CLI via ssh as admin (uid=1) you can escalate your privileges to uid 0 and get /bin/sh. 
In order to achieve this open 'less' which is available as default for viewing files (ie. less /tmp/top.log) and type 
in '!/bin/sh'. This will give you direct access to sh shell with UID 0. Tested only on OS version as above. 


  By Date           By Thread  

Current thread:
  • Overland Guardian OS CLI command line bug - let you get uid 0 shell trompele (Oct 20)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault