Bugtraq mailing list archives
Re: Sudo tricks
From: "Dave Korn" <davek_throwaway () hotmail com>
Date: Fri, 24 Mar 2006 19:05:34 -0000
John Richard Moser wrote:
Here is a simple hack to break sudo and su to get free root. Add this to ~/.bashrc and fill in the following blanks: * ~/.root_kit/rk_su Your hacked su to give root on su --now-dammit * ~/.root_kit/silent_install_root_kit Your script to silently install rk_su over /bin/su and add SUID to it.
[dk@pepper dk]$ ls -la /bin/su -rwsr-xr-x 1 root root 19132 Aug 29 2002 /bin/su So, in other words, all you need in order to get root access is a rootkit, your shell script, and root access? Ummm... I don't get it. cheers, DaveK -- Can't think of a witty .sigline today....
Current thread:
- Sudo tricks John Richard Moser (Mar 23)
- Re: Sudo tricks Dave Korn (Mar 25)
- Re: Sudo tricks Kyle Wheeler (Mar 27)
- Re: Sudo tricks Thomas M. Payerle (Mar 28)
- Re: Sudo tricks Krzysztof Halasa (Mar 29)
- RE: Sudo tricks Burton Strauss (Mar 31)
- <Possible follow-ups>
- Re: Sudo tricks Steven M. Christey (Mar 28)
- Re: Sudo tricks Javor Ninov (Mar 31)
- Re: Sudo tricks Dave Korn (Mar 25)