CVE-2001-1177

The vulnerability in ml85p, a Linux driver for Samsung ML-85G printers, allows privilege escalation due to insecure handling of symbolic links in /tmp with predictable filenames. Attackers can exploit this to overwrite arbitrary files with user-supplied data.

This exploit leverages a symbolic link vulnerability in the setuid program ml85p to overwrite /etc/ld.so.preload, enabling privilege escalation by preloading a malicious shared library that overrides getuid() to return 0.

This exploit leverages a symbolic link vulnerability in the ml85p Linux printer driver to overwrite arbitrary files, potentially leading to privilege escalation. It creates multiple symlinks in /tmp with predictable names and triggers the vulnerable driver to write user-supplied data to the target file.