22019, 1/1101 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   benkim
   ÇØÄ¿½ºÄð ftz level5

http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=30919 [º¹»ç]


¿Ö /usr/bin/level5¿¡ level6 setuid°¡ ¾È°É¿©ÀÖ³ª¿ä????

[level5@ftz level5]$ ls -l /usr/bin/level5
-rwx--x---    1 level6   level5      14402  3¿ù 29  2003 /usr/bin/level5
[level5@ftz level5]$

Á¦°¡ /tmp ÆÄÀÏ¿¡ level5.tmp¶ó´Â ÆÄÀÏÀ» »ý¼º Çߴµ¥.......

º¸´Ï±î /usr/bin/level5¿¡ level6±ÇÇÑÀÌ ¾ø´õ±º¿ä.......

/usr/bin/level5¿¡ level6±ÇÇÑÀÌ ¾ø´Â°Ô Á¤»óÀΰ¡¿ä?????

  Hit : 9930     Date : 2013/06/07 02:11



    
benkim ±×¸®°í Á¦°¡ level5.tmp¶ó´Â ÆÄÀÏÀ» Á¦±ÇÇÑÀ¸·Î ¸¸µé¾ú´Âµ¥..... ¿Ö /usr/bin/level5¸¦ ½ÇÇàÇϸé /tmp¿¡ ÀÖ´Â level5.tmp°¡¿Ö ¾ø¾î Áú±î¿ä???? 2013/06/07  
kumi123 ÀÌ ¹®Á¦´Â, suid °ü·Ã ¹®Á¦¶ó±âº¸´Ü, level5.tmp¿¡ ´ÙÀ½ ÆÐ½º¿öµå°¡ ´ã°ÜÁ® ÀÖ°í,

·¹À̽ºÄÁµð¼ÇÀ¸·Î Ǫ´Â °Ì´Ï´Ù.
2013/06/07  
benkim ¾Æ~ °¨»çÇÕ´Ï´Ù 2013/06/08  
whitetie Á¤»óÀÔ´Ï´Ù. ¿ø·¡ setuid°¡ ¾È°É·ÁÀÖ¾î¿ä ¤» 2013/06/09