Published on

TIL: Running `ldd` can cause arbitrary code execution

TIL you can craft a binary to cause arbitrary code execution when someone runs ldd on it.

This can be done by ignoring the LD_TRACE_LOADED_OBJECTS set by ldd (you need a custom version of libc for that).

Source: catonmat.net