Debian suidmanager 0.18 - Command Execution
Author: Thomas Roessler
type: local
platform: linux
port:
date_added: 1998-04-28
date_updated: 2017-11-15
verified: 1
codes: CVE-1999-1390;OSVDB-6332
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/94/info
/usr/bin/suidexec will execute arbitrary commands as root,
as soon as just _one_ suid root shell script can be found
on the system: Just invoke
/usr/bin/suidexec <your program> /path/to/script
- it will happily execute your program with euid = 0. This
is completely sufficient for doing arbitrary damage on the
system.