CVE-2000-0691
mgetty - Arbitrary File Write via Symlink Attack in faxrunq and faxrunqd
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0691. PoCs published by Stan Bubrouski.
AI-analyzed exploit summary This exploit leverages a symbolic link vulnerability in mgetty's faxrunq and faxrunqd programs to create or overwrite arbitrary files, potentially leading to local root compromise. The PoC demonstrates how a local attacker can manipulate the .last_run file in /var/spool/fax/outgoing to achieve this.
Description
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
Exploits (1)
This exploit leverages a symbolic link vulnerability in mgetty's faxrunq and faxrunqd programs to create or overwrite arbitrary files, potentially leading to local root compromise. The PoC demonstrates how a local attacker can manipulate the .last_run file in /var/spool/fax/outgoing to achieve this.