CVE-1999-0051
FLEXlm 4.0-5.0 - Arbitrary File Creation and Program Execution
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-1999-0051. PoCs published by Joel Eriksson, Yuri Volobuev, Arthur Hagen.
AI-analyzed exploit summary This exploit leverages a symlink vulnerability in the Solaris License Manager (versions 2.5.1 and 2.6) to gain root access by manipulating lockfiles. The script creates a symlink to a target user's .rhosts file, allowing arbitrary command execution.
Description
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
Exploits (4)
This exploit leverages a symlink vulnerability in the Solaris License Manager (versions 2.5.1 and 2.6) to gain root access by manipulating lockfiles. The script creates a symlink to a target user's .rhosts file, allowing arbitrary command execution.
This exploit leverages a vulnerability in LicenseManager(1M) to manipulate root-owned files by creating a symbolic link to /.rhosts, allowing an attacker to gain root access via rsh. The exploit involves setting up a malicious license file and triggering an update to overwrite the target file.
This exploit leverages a vulnerability in LicenseManager(1M) to overwrite root-owned files, such as /.rhosts or /etc/passwd, by manipulating the NETLS_LICENSE_FILE environment variable. The attack allows for privilege escalation to root by injecting arbitrary content into sensitive files.
The repository contains a placeholder markdown file for CVE-1999-0051, describing an arbitrary file creation and program execution vulnerability in FLEXlm LicenseManager (versions 4.0 to 5.0) on IRIX. No functional exploit code, technical details, or proof-of-concept is provided.