Raphael Marichez
16/11/06, 02:41
--OROCMA9jn6tkzFBc
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
> um ... doesn't that make it a *remote* privilege escalation ?
in a certain way... you're right... although that requires the user
complicity, strictly speaking, you're right.
The guy who would manage to remotely root a box with that vulnerability wou=
ld
be really good. The real serious risk is local only. (think about all
that unpatched linux boxes in the universities...)
Cheers,
--=20
Rapha=EBl Marichez aka Falco
--OROCMA9jn6tkzFBc
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQFFWPtKIS4GNEW6wBQRAiGnAJ9NrtJSNVn6TgCaFajm3c 66kfC/0ACbBgMQ
nU/E+KiKjGqVMqrp1QvNb34=
=L9ls
-----END PGP SIGNATURE-----
--OROCMA9jn6tkzFBc--
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
> um ... doesn't that make it a *remote* privilege escalation ?
in a certain way... you're right... although that requires the user
complicity, strictly speaking, you're right.
The guy who would manage to remotely root a box with that vulnerability wou=
ld
be really good. The real serious risk is local only. (think about all
that unpatched linux boxes in the universities...)
Cheers,
--=20
Rapha=EBl Marichez aka Falco
--OROCMA9jn6tkzFBc
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQFFWPtKIS4GNEW6wBQRAiGnAJ9NrtJSNVn6TgCaFajm3c 66kfC/0ACbBgMQ
nU/E+KiKjGqVMqrp1QvNb34=
=L9ls
-----END PGP SIGNATURE-----
--OROCMA9jn6tkzFBc--