Vulnerability Development mailing list archives

Re: /lib/ld-2.2.4.so


From: Florian Weimer <Weimer () CERT Uni-Stuttgart DE>
Date: Thu, 25 Apr 2002 20:07:25 +0200

Bill Weiss <houdini () nmt edu> writes:

Oh?  What about (as the original poster said) if you have user directories
mounted as noexec?  tmp as well?  Where would you copy the file to so it
could exec?

You could patch it into the memory of an existing process using /proc
and Perl. Or you could reimplement its functionality in Perl, or even
shell scripts.

-- 
Florian Weimer                    Weimer () CERT Uni-Stuttgart DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Current thread: