--OROCMA9jn6tkzFBc
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

> um ... doesn't that make it a *remote* privilege escalation ?


in a certain way... you're right... although that requires the user
complicity, strictly speaking, you're right.


The guy who would manage to remotely root a box with that vulnerability wou=
ld
be really good. The real serious risk is local only. (think about all
that unpatched linux boxes in the universities...)

Cheers,
--=20
Rapha=EBl Marichez aka Falco


--OROCMA9jn6tkzFBc
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFWPtKIS4GNEW6wBQRAiGnAJ9NrtJSNVn6TgCaFajm3c 66kfC/0ACbBgMQ
nU/E+KiKjGqVMqrp1QvNb34=
=L9ls
-----END PGP SIGNATURE-----

--OROCMA9jn6tkzFBc--