0

http://www.catonmat.net

The `ldd` utility is more vulnerable than you think. It’s frequently used by programmers and system administrators to determine the dynamic library dependencies of executables. Sounds pretty innocent, right? Wrong! It turns out that running `ldd` on an executable can result in executing arbitrary code. I researched this subject thoroughly and found that it was almost completely undocumented. This article details how such executable can be constructed and comes up with a social engineering scenario that may lead to system compromise.

Full story »
pkrumins's picture
Created by pkrumins 14 years 49 weeks ago – Made popular 14 years 49 weeks ago
Category: Beginner   Tags:

Best karma users