Exploitation Summary
EIP tracks 3 public exploits for CVE-2001-1177. PoCs published by ml85p, Charles Stevenson.
AI-analyzed exploit summary The vulnerability in ml85p, a Linux driver for Samsung ML-85G printers, allows privilege escalation due to insecure handling of symbolic links in /tmp with predictable filenames. Attackers can exploit this to overwrite arbitrary files with user-supplied data.
Description
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Exploits (3)
The vulnerability in ml85p, a Linux driver for Samsung ML-85G printers, allows privilege escalation due to insecure handling of symbolic links in /tmp with predictable filenames. Attackers can exploit this to overwrite arbitrary files with user-supplied data.
This exploit leverages a symbolic link vulnerability in the setuid program ml85p to overwrite /etc/ld.so.preload, enabling privilege escalation by preloading a malicious shared library that overrides getuid() to return 0.
This exploit leverages a symbolic link vulnerability in the ml85p Linux printer driver to overwrite arbitrary files, potentially leading to privilege escalation. It creates multiple symlinks in /tmp with predictable names and triggers the vulnerable driver to write user-supplied data to the target file.