CVE-2000-0171
atsar_linux - Privilege Escalation via Improper Output File Permission Check
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0171. PoCs published by S. Krahmer.
AI-analyzed exploit summary This exploit leverages a vulnerability in atsadc (part of the atsar package) where it opens arbitrary files as root without proper permission checks. The PoC creates a malicious shared library and uses /etc/ld.so.preload to gain root privileges via a setuid binary.
Description
atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
Exploits (1)
This exploit leverages a vulnerability in atsadc (part of the atsar package) where it opens arbitrary files as root without proper permission checks. The PoC creates a malicious shared library and uses /etc/ld.so.preload to gain root privileges via a setuid binary.