CVE-1999-1491
Red Hat Linux 2.1 - Local Command Execution via Trojan Horse Program in Relative Path
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-1491. PoCs published by David J Meltzer.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in the suid-root game 'abuse.console' on Red Hat Linux 2.1 to execute arbitrary code as root. It creates a malicious 'sndrv' script in /tmp that copies /bin/sh to /tmp/abuser and sets the suid bit.
Description
abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
Exploits (1)
This exploit leverages a path traversal vulnerability in the suid-root game 'abuse.console' on Red Hat Linux 2.1 to execute arbitrary code as root. It creates a malicious 'sndrv' script in /tmp that copies /bin/sh to /tmp/abuser and sets the suid bit.