PDA

Bekijk Volledige Versie : Re: [security@suse.de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without P



Todd C. Miller
31/05/05, 22:55
In message <20050531085218.GA10534@suse.de>
so spake Marcus Meissner (meissner):

> I cannot reproduce this in the default installation of sudo in SUSE Linux
> 9.3.

Sudo catches SIGINT and returns an empty string for the password
so I don't see how this could happen unless the user's actual
password was empty. I suppose some kind of PAM misconfiguration
is also possible.

- todd