get root shell with gdb

Musikolo · 02-14-2005, 12:41 PM

Hi mates, I've recently heard about the possibility of getting a root shell by using some kind of command line with gdb.

Do you know how is this possible, if so??

Since I have a small server, I would like to know if this is possible to act in accordance to it.

Thanks!

Capt_Caveman · 02-15-2005, 04:06 PM

I seem to remember a vulnerability in gdb itself not too long ago, but I can't seem to find the advisory so I'm not sure about that. However, I don't think that's actually what you meant. gdb is often used to step through an applications execution and get various memory address (like stack pointers) that are important for writing buffer overflows, which are then used to get things like command shells, write viruses, etc. By itself though, gdb isn't some kind of uber point-and-click cracking tool, it's just a debugger.