- Published on
TIL: Running `ldd` can cause arbitrary code execution
TIL you can craft a binary to cause arbitrary code execution when someone runs ldd
on it.
This can be done by ignoring the LD_TRACE_LOADED_OBJECTS
set by ldd
(you need a custom version of libc for that).
Source: catonmat.net