The binary has Runpath Search Path (@rpath) set.

Started 2 weeks ago by Dhanasekar in React Native

The binary has Runpath Search Path (@rpath) set. In certain cases an attacker can abuse this feature to run arbitrary executable for code execution an...

Body

The binary has Runpath Search Path (@rpath) set. 
In certain cases an attacker can abuse this feature to run arbitrary executable for code execution and privilege escalation.
Remove the compiler option -rpath to remove @rpath.
  • No one is replied to this thread yet. Be first to reply!