Debian suidmanager 0.18 - Command Execution

Author: Thomas Roessler
type: local
platform: linux
port: 0
date_added: 1998-04-28
date_updated: 2017-11-15
verified: 1
codes: CVE-1999-1390;OSVDB-6332
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/94/info

/usr/bin/suidexec will execute arbitrary commands as root,
as soon as just _one_ suid root shell script can be found
on the system: Just invoke

/usr/bin/suidexec <your program> /path/to/script

- it will happily execute your program with euid = 0. This
is completely sufficient for doing arbitrary damage on the
system.
↑