BugTraq
Sudo tricks Mar 22 2006 10:40PM
John Richard Moser (nigelenki comcast net) (2 replies)
Re: Sudo tricks Mar 28 2006 01:27PM
Krzysztof Halasa (khc pm waw pl) (1 replies)
RE: Sudo tricks Mar 29 2006 05:46PM
Burton Strauss (Security SmallNetSolutions com)
Re: Sudo tricks Mar 24 2006 07:05PM
Dave Korn (davek_throwaway hotmail com) (2 replies)
Re: Sudo tricks Mar 27 2006 08:29PM
Thomas M. Payerle (payerle physics umd edu)
Re: Sudo tricks Mar 26 2006 03:25AM
Kyle Wheeler (kyle-bugtraq memoryhole net)
On Friday, March 24 at 07:05 PM, quoth Dave Korn:
>> Here is a simple hack to break sudo and su to get free root. Add
>> this to ~/.bashrc and fill in the following blanks:
>>
>> * ~/.root_kit/rk_su
>> Your hacked su to give root on su --now-dammit
>> * ~/.root_kit/silent_install_root_kit
>> Your script to silently install rk_su over /bin/su and add SUID to
>> it.
>
> So, in other words, all you need in order to get root access is a
> rootkit, your shell script, and root access? Ummm... I don't get
> it.

More precisely, if I have access to your bashrc and you have access to
sudo, I can give myself permanent root access (I don?t need to know
your password).

~Kyle
--
Well, I've wrestled with reality for over thirty five years, doctor, and
I'm happy to state I finally won out over it.
-- Jimmy Stewart, in "Harvey"
-----BEGIN PGP SIGNATURE-----
Comment: Thank you for using encryption!

iD8DBQFEJgmcBkIOoMqOI14RAj33AKDjUkA6ha4ELvTYLjzfwNnFuu95XgCgxkyg
in2K1/VSUNX5aIUUQ4HcCtc=
=inIZ
-----END PGP SIGNATURE-----

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus