3 ms·
I’m a bit confused - these aren’t long running tools, but are tools you use once or twice for troubleshooting. I’m trying to work out a scenario where this woul
by chris_wot 7y ago
I’m a bit confused - these aren’t long running tools, but are tools you use once or twice for troubleshooting. I’m trying to work out a scenario where this would be a major issue.
- geofft 7y agoWait, why does that make a difference? If an attacker can get you to run privileged malicious code once, they've won. This seems like the Windows-land equivalent of the old GNU ldd bug - it's rare that you use ldd and rarer still that a sysadmin runs it as root on a user-provided binary, but once they do, the user can immediately escalate privileges (and use whatever means they like for persistence).