- Published on
TIL: Running `ldd` can cause arbitrary code execution
TIL you can craft a binary to cause arbitrary code execution when someone runs ldd on it.
This can be done by ignoring the LD_TRACE_LOADED_OBJECTS set by ldd (you need a custom version of libc for that).
Source: catonmat.net