source: http://www.securityfocus.com/bid/94/info
/usr/bin/suidexec will execute arbitrary commands as root,
as soon as just _one_ suid root shell script can be found
on the system: Just invoke
/usr/bin/suidexec <your program> /path/to/script
- it will happily execute your program with euid = 0. This
is completely sufficient for doing arbitrary damage on the
system.
京公网安备 11010502034610号
暂无评论