Re: Bitkeeper licence issues

David S. Miller
2002-03-19T23:32:25Z

From: Larry McVoy <lm@bitmover.com>
Date: Tue, 19 Mar 2002 15:25:02 -0800

Come on Pavel, in order to make this happen, you have to

a) run the installer as root
b) know the next pid which will be allocated
c) put the symlink in /tmp/installer$pid

Exploit: Make all 65535 $pid simlinks

It's very exploitable actually, and is similar in vein to
all the ancient mktemp stuff.