Sun Microsystems, Inc.  Oracle System Handbook - ISO 7.0 May 2018 Internal/Partner Edition
   Home | Current Systems | Former STK Products | EOL Systems | Components | General Info | Search | Feedback

Asset ID: 1-71-2352182.1
Update Date:2018-01-23
Keywords:

Solution Type  Technical Instruction Sure

Solution  2352182.1 :   Can loopMount be used to Escalate the Privilege of a Local user  


Related Items
  • Oracle Communications Diameter Signaling Router (DSR)
  •  
Related Categories
  • PLA-Support>Sun Systems>CommsGBU>Global Signaling Solutions>SN-SND: Tekelec DSR
  •  




In this Document
Goal
Solution


Created from <SR 3-16481574171>

Applies to:

Oracle Communications Diameter Signaling Router (DSR) - Version DSR 8.1.0 and later
Information in this document applies to any platform.

Goal

Can loopMount be executed by a default user on a DSR 8.1 system and thus be used to elevate the privilege of that user to root.

Solution

Please note below that in DSR 8.1 the loopMount command is not world executable so a default user would not be able to execute it.

[admusr@EVO-SO-2 ~]$
[admusr@EVO-SO-2 ~]$ appRev
  Install Time: Fri Jun 30 04:10:21 2017
  Product Name: DSR
  Product Release: 8.1.0.0.0_81.20.0
Base Distro Product: TPD
Base Distro Release: 7.4.0.0.0_88.37.0
  Base Distro ISO: TPD.install-7.4.0.0.0_88.37.0-OracleLinux6.8-x86_64.iso
  ISO name: DSR-8.1.0.0.0_81.20.0-x86_64.iso
  OS: OracleLinux 6.8

[admusr@EVO-SO-2 ~]$ ls -l /usr/TKLC/plat/bin/loopMount
-rwxr-x---. 1 root root 21187 Aug 26 2016 /usr/TKLC/plat/bin/loopMount
[admusr@EVO-SO-2 ~]$


Attachments
This solution has no attachment
  Copyright © 2018 Oracle, Inc.  All rights reserved.
 Feedback