3 ms·
What could go wrong? “Perl cgi html uploading linux kernel”
- dendisuhubdy 9y agoJIAHAHAAAAAAA
- dang 9y agoNot here, please.
- MichaelBurge 9y agoI can think of some convoluted scenarios where it's plausible(What if a computer distributor had some private testing server that vendors could use to test drivers?). I can't think of a good reason for anybody that has to ask how to do it.
- kbart 9y agoI have seen this in some cheap Chinese home routers.
- dTal 9y ago>solved it by adding in the visudo file a line thar www-data user needs no password for sudo Dear lord. SUID scripts have a bad reputation but that would have been a much more secure solution. Now the attack surface is the entire of lighthttpd plus any CGI scripts, which is much simpler to exploit than crafting a custom malicious kernel module.