3 ms·
I don't understand how this leads to a root exploit - I assume c-ares is running in userland inside a user's host process (a web-browser) - or if there is a sys
by DaiPlusPlus 10y ago
I don't understand how this leads to a root exploit - I assume c-ares is running in userland inside a user's host process (a web-browser) - or if there is a systemwide daemon for DNS or other network services hosting c-ares then it should run under limited privilege. Which component is already running at root that allows this to happen?
- deleted 10y ago[deleted]
- diamondo25 10y agoThe exploit was made in the c-ares function, that was running on the HTTP proxy that was running as root (and on the same system). The attack requires javascript and an evil webserver; its not a fully local exploit.