|
|
BugTraq
Linux OpenExchange - cleartext rootpw in swap Aug 31 2004 08:11AM Rene (l0om excluded org) (1 replies) Re: Linux OpenExchange - cleartext rootpw in swap Aug 31 2004 06:48PM Rainer Duffner (rainer ultra-secure de) (2 replies) Re: Linux OpenExchange - cleartext rootpw in swap Sep 03 2004 06:02AM Joshua Goodall (joshua myinternet com au) |
|
Privacy Statement |
> It would be bad, if a non-priviledged user had access to the swap-partition.
> On the two SLOXs I have access to, the swap-partition is only
> group-readable by the "disk" group.
At which point, if you can get access to group "disk", you have probably 0wned
the box completely. So there *is* a privilege escalation issue there.....
[ reply ]