CVE-1999-0051

This exploit leverages a symlink vulnerability in the Solaris License Manager (versions 2.5.1 and 2.6) to gain root access by manipulating lockfiles. The script creates a symlink to a target user's .rhosts file, allowing arbitrary command execution.

This exploit leverages a vulnerability in LicenseManager(1M) to manipulate root-owned files by creating a symbolic link to /.rhosts, allowing an attacker to gain root access via rsh. The exploit involves setting up a malicious license file and triggering an update to overwrite the target file.

This exploit leverages a vulnerability in LicenseManager(1M) to overwrite root-owned files, such as /.rhosts or /etc/passwd, by manipulating the NETLS_LICENSE_FILE environment variable. The attack allows for privilege escalation to root by injecting arbitrary content into sensitive files.