Debian Linux apache privilege escalation
Published:		26.02.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7307
Type:		local
Level:		6/10
Description:		User can inject shell command into shell from where apache was started by using TIOCSTI ioctl on the ctty socket in CGI script.

Original document

Richard Thrippleton, [Full-disclosure] Local user to root escalation in apache 1.3.34 (Debian only) (26.02.2007)

Files:		Debian Apache CGI TIOCSTI weakness
Discuss:		Read or add your comments to this news (0 comments)