950, 1/48 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   diagod4806
   FTZ level5 ¿¡¼­ Áú¹®.. ¹®Á¦Ç®À̰¡ ¾Æ´Ï¿¡¿ä!

http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=99 [º¹»ç]


LEVEL5 ÈùÆ®¸¦ »ìÆìº¸¸é

/usr/bin/level5 ÇÁ·Î±×·¥Àº /tmp µð·ºÅ丮¿¡
level5.tmp ¶ó´Â À̸§ÀÇ ÀÓ½ÃÆÄÀÏÀ» »ý¼ºÇÑ´Ù.

À̸¦ ÀÌ¿ëÇÏ¿© level6ÀÇ ±ÇÇÑÀ» ¾ò¾î¶ó.

ÀÌ·± ³»¿ëÀÌ ÀÖ½À´Ï´Ù.

Á÷Á¢ ã¾Æ°¡¼­ È®ÀÎÇØºÃ½À´Ï´Ù..

-rwx--x---    1 level6   level5      14402  3¿ù 29  2003 level5

setUID °¡ ¼³Á¤ÀÌ ¾ÈµÇÀִµ¥.. ±×·¡µµ Ç®¼öÀִ°ǰ¡¿ä??

±ÇÇÑÀ» ¾ò±âÀ§Çؼ± setUID°¡ µÇ¾î ÀÖ¾î¾ß µÇ´Â°Å ¾Æ´Ñ°¡¿ä??

  Hit : 4600     Date : 2011/02/17 06:12



    
lMaxl04 ³× ¾ø¾îµµµË´Ï´Ù 2011/02/17  
º°ºûÀ»´ã¾Æ ÈùÆ®¸¦ µå¸®ÀÚ¸é....
level5°¡ ½ÇÇàµÇ¸é level5.tmp¶ó´Â ÆÄÀÏÀÌ »ý±â°í level5°¡ Á¾·áµÇ¸é level5.tmpÆÄÀÏÀ» »èÁ¦ÇØ¿ä

1. level5.tmp¿¡ ´ÙÀ½ ·¹º§·Î °¡´Â ºñ¹Ð¹øÈ£°¡ ±â·ÏµÇ¾îÀÖ¾î¿ä
2. ÀÌ ÆÄÀÏÀº ÇÁ·Î±×·¥ÀÌ Á¾·áµÇ¸é¼­ »èÁ¦µÇ¿ä.
3. ±×·¸´Ù¸é.... ¾î¶»°Ô ÇØ¾ß Àú ÆÄÀÏÀÌ »èÁ¦µÇÁö ¾ÊÀ»±î¿ä?
2011/02/17  
diagod4806 ¾Æ ±×·¸±º¿ä ¤¾ Áö±Ý±îÁö ÇØ¿Ô´ø ·çÆ®ÇØÅ·ÀÎÁÙ ¾Ë¾Ò½À´Ï´Ù¤Ð¤Ð.. setUID ÀÌ¿ëÇØ¼­ ·çÆ® ±ÇÇÑÀ» ¾ò´Â ¹æ¹ýÀÎÁÙ.. 2011/02/18  
diagod4806 ´äº¯ÇØÁּż­ °¨»çÇÕ´Ï´Ù~ 2011/02/18