CVE-2005-1843

Related Files

iDEFENSE Security Advisory 2005-08-29.1

Posted Aug 31, 2005

Authored by vade79, iDefense Labs | Site idefense.com

iDEFENSE Security Advisory - Local exploitation of a design error in Adobe Systems, Inc. Version Cue allows local attackers to gain root privileges. Version Cue includes a setuid root application named VCNative which contains a design error that allows local attackers to gain root privileges. The vulnerability specifically exists due to an unchecked command line option parameter. The -lib command line option allows users to specify library bundles which allows for the introduction of arbitrary code in the context of a root owned process. The init function in a shared library is executed immediately upon loading. By utilizing the -lib argument to load a malicious library, local attackers can execute arbitrary code with root privileges.

tags | advisory, arbitrary, local, root

advisories | CVE-2005-1843

SHA-256 | 4df7fce995e778869fe2e236a60a050ada95134690b5bfce30b5fc73c86389d1

Download | Favorite | View