Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0787. PoCs published by Tymm Twillman.
AI-analyzed exploit summary This exploit leverages a vulnerability in SSH's handling of UNIX domain sockets, where symbolic links are followed during bind(2), allowing local users to create arbitrary socket files. The provided Perl script creates symbolic links in the /tmp/ssh-<username> directory to exploit this behavior.
Description
The SSH authentication agent follows symlinks via a UNIX domain socket.
Exploits (1)
This exploit leverages a vulnerability in SSH's handling of UNIX domain sockets, where symbolic links are followed during bind(2), allowing local users to create arbitrary socket files. The provided Perl script creates symbolic links in the /tmp/ssh-<username> directory to exploit this behavior.