Questions tagged [symlink]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
61 views

Looking for a way to overwrite a symbolic link

I'm peparing for OSCP and I found an interesting situation (Alpine Linux). There is a daemon super_service executed by root that is reading configuration file from /var/super_service/configs/ which ...
1
vote
1answer
592 views

Symlink file name - possible exploit?

I found a vulnerability in one of my managed website where I can give any name to the symlink file name source link. I cannot control the target directory link though. Also I can create as many ...
2
votes
2answers
465 views

Should programs check for symlinks before creating files?

We received a bug report (phrased as a security issue) for a program, which stated that when the program creates files on disk, it does not first verify if a symbolic link exists at the file path to ...
5
votes
1answer
313 views

Why do broken symlinks pose a security threat?

I have been given a security specification document that contains some rules about the product I currently work on (docker containers). One states that: All broken symlinks must be removed. My ...
4
votes
2answers
1k views

How to secure SFTP against symlink attack?

I've configured SFTP on my virtual machine, because I wanted to test how can I use symlink in order to access files outside from user home directory. I've created user: test:x:1003:1001::/var/www/...
3
votes
1answer
2k views

Will disabling “symlink” in PHP.ini prevent attackers from attacking other websites?

I have a small shared server where couple of websites are hosted, so I'm not sure if this kind of protection will be enough to prevent attackers from executing symlink attack. I've added symlink to ...
1
vote
1answer
987 views

Symlinks from public_html to directory linking to files in custom home directory

I have setup a multi-sites project on a VPS server with WHM and cPanel. Codebase is installed on a custom created folder named sites inside the cPanel user account home directory, with a subdomain ...
3
votes
1answer
9k views

Symbolic links, PATH and privilege escalation vulnerability

I am a bit inexperienced to this... I am using this VM https://www.vulnhub.com/entry/the-wall-1,130/ for practicing and there is a step I don't understand. Here: https://research.g0blin.co.uk/thewall-...
6
votes
2answers
3k views

Is it possible become root through a broken symlink owned by root and globally writeable?

I'm looking for a vulnerability on a server. I'm looking in the /var directory and I get something like this: drwxr-xr-x 3 root root 4.0K Aug 14 21:02 kerberos drwxr-xr-x 12 root root 4.0K Nov 11 ...
9
votes
1answer
3k views

Is symlink race a very common vulnerability in UNIX systems

As far as I know, when I am creating a new file or directory in a directory that can be written by multiple users (and thus an adversary can have made a symlink there), the only way to protect myself ...
8
votes
1answer
9k views

How zip symlink works?

I've seen lately some bugs that used zip symlink technique , can anyone explain how this vulnerability works , how attackers use it to exploit applications? Thanks