Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0698. PoCs published by Michal Zalewski.
AI-analyzed exploit summary The exploit demonstrates a vulnerability in Minicom where specifying a capture-file on the command line allows creating files with effective gid uucp, potentially leading to privilege escalation on systems using uucp services. The example shows how a file can be created with uucp group ownership, which could be exploited to overwrite critical files.
Description
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.
Exploits (1)
The exploit demonstrates a vulnerability in Minicom where specifying a capture-file on the command line allows creating files with effective gid uucp, potentially leading to privilege escalation on systems using uucp services. The example shows how a file can be created with uucp group ownership, which could be exploited to overwrite critical files.