CVE-2008-4190
Openswan <=2.4.12, 2.6.x<=2.6.16 - Arbitrary File Write and Code Execution via Symlink Attack
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4190. PoCs published by nofame.
AI-analyzed exploit summary This exploit leverages a symlink race condition in OpenSwan's IPSEC livetest tool to overwrite arbitrary files and execute arbitrary commands as root. It creates a FIFO pipe to exploit the delay between file creation and execution by the shell.
Description
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled.
Exploits (1)
This exploit leverages a symlink race condition in OpenSwan's IPSEC livetest tool to overwrite arbitrary files and execute arbitrary commands as root. It creates a FIFO pipe to exploit the delay between file creation and execution by the shell.