Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5706. PoCs published by v4lkyrius.
AI-analyzed exploit summary This is a detailed technical analysis of CVE-2008-5705, a command injection vulnerability in Verlihub <=0.9.8d-RC2. The writeup includes the root cause (unsanitized input in the trigger mechanism), exploit steps, and a patch diff.
Description
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file.
Exploits (1)
This is a detailed technical analysis of CVE-2008-5705, a command injection vulnerability in Verlihub <=0.9.8d-RC2. The writeup includes the root cause (unsanitized input in the trigger mechanism), exploit steps, and a patch diff.