4 ms·
So from what I can tell this is not in any way a security issue or anything new. If you can LD_PRELOAD a library when running a system executable, then you can
by readams 11y ago
So from what I can tell this is not in any way a security issue or anything new. If you can LD_PRELOAD a library when running a system executable, then you can backdoor it trivially since LD_PRELOAD is designed to allow you to substitute existing symbols with your own symbols. The use of go here matters not at all, and this is not an attack against system executables that use go.
Of course, you can't, as an ordinary user, start system executables with elevated privileges and set LD_PRELOAD.
- 0x0 11y agoAgree that this sounds like a non-story. If you can execute code, you can execute code! Wow. Obviously LD_PRELOAD isn't parsed by suid binaries.
- jerf 11y agoRelevant and fun: http://blogs.msdn.com/b/oldnewthing/archive/2007/08/07/4268706.aspx http://blogs.msdn.com/b/oldnewthing/archive/2007/08/07/42687... (Also no accusation to the original author intended. It's just relevant and fun to the parent message.)
- mattbostock 11y agoThe 'backdoor' just refers to the fact that it starts a TCP server that will execute commands sent to it. That's not really the point; the novelty aspect is that it uses the new 'c-shared' buildmode supported by Go version 1.5. I think it also demonstrates how easy it is to write something similar to Telnet in Go.