|
GRSecurity Elevated Service Privileges Weakness
The grsecurity patch may improperly allow services to run with elevated privileges. This issue is due to a failure of the kernel to properly drop administrative roles. This issue may lead to a false sense of security by allowing network services that are intended to have limited privileges to have administrative privileges. The exact repercussions of this issue depend on the particular function of the services running with elevated privileges. Privileges granted to services depend on the configured administrative role. Attackers may exploit latent vulnerabilities in network services, and compromise the underlying computer. This is due to the targeted service having elevated privileges that are not intended. |
|
|
Privacy Statement |
