CVE-2004-0064

SuSE 9.0 - Local Privilege Escalation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-0064. PoCs published by l0om.

AI-analyzed exploit summary This exploit targets a vulnerability in SuSE 9.0's YaST script SuSEconfig.gnome-filesystem, allowing an attacker to create or overwrite arbitrary files via a symlink attack. The code creates multiple directories and symlinks to exploit a race condition in the script.

Description

The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory.

Exploits (1)

exploitdb WORKING POC VERIFIED

by l0om · clocallinux

https://www.exploit-db.com/exploits/144

View Code ZIP pw:eip

This exploit targets a vulnerability in SuSE 9.0's YaST script SuSEconfig.gnome-filesystem, allowing an attacker to create or overwrite arbitrary files via a symlink attack. The code creates multiple directories and symlinks to exploit a race condition in the script.

Classification

Working Poc 90%

Attack Type

Other

Complexity

Moderate

Reliability

Racy

Target: SuSE 9.0 YaST script SuSEconfig.gnome-filesystem

No auth needed

Prerequisites: Access to the target system to execute the exploit · SuSE 9.0 with vulnerable YaST script

MITRE ATT&CK