CVE-2001-0109
SuSE Linux <= 7.0 - Arbitrary File Write via rctab Symlink Attack
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0109. PoCs published by IhaQueR.
AI-analyzed exploit summary This exploit leverages a race condition in the rctab script on SuSE Linux to gain elevated privileges by pre-creating directories in /tmp and hijacking the script's file operations. It waits for root to execute rctab and then replaces the target file with a malicious version.
Description
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.
Exploits (2)
This exploit leverages a race condition in the rctab script on SuSE Linux to gain elevated privileges by pre-creating directories in /tmp and hijacking the script's file operations. It waits for root to execute rctab and then replaces the target file with a malicious version.
This exploit leverages a race condition in the SuSE Linux rctab script to gain root privileges by manipulating temporary directories in /tmp. It creates a suid shell and appends malicious commands to /root/.bashrc via a symlink attack.