CVE-2003-1366
OpenBSD 2.0-3.2 - Unauthorized File Read via chpass Hard Link Attack
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-1366. PoCs published by Marc Bevand.
AI-analyzed exploit summary This exploit leverages a race condition in OpenBSD's chpass utility to read arbitrary files by manipulating the temporary file used during password changes. The attacker creates a symlink to a target file, tricking chpass into displaying its contents.
Description
chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information.
Exploits (1)
This exploit leverages a race condition in OpenBSD's chpass utility to read arbitrary files by manipulating the temporary file used during password changes. The attacker creates a symlink to a target file, tricking chpass into displaying its contents.