you are viewing a single comment's thread
view the rest of the comments
[–] 65 points 10 hours ago* (2 children)

Getting a shell is bad, but what makes this worse is the insecurity of popular Linux tools that can be used for privilege escalation.

The sudo program has had a known vulnerability since its inception. The developers are incompetent. In some configurations, all you need is the user's password and you can execute arbitrary code as root. Sometimes, no password is needed at all.

  • source
  • hideshow 2 child comments