OSVDB ID: 17621

Title: Dominion SX /bin/busybox Permission Weakness Privilege Escalation

Info

Disclosure

Jun 29, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Dominion SX contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is due to the /bin/busybox file having default permissions of world-writable, which may allow an attacker replace the file causing arbitrary code execution with another user's privileges.

Classification

Location: Local Access Required
Attack Type: Other
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Raritan has released a patch to address this vulnerability.

Products

Raritan Computer Inc.

Dominion SX

2.2.11

References

Credit

  • Dirk Wetter -


Direct URL: http://osvdb.org/36218