3 ms·
Not to completely minimize it, but that says local attacker, not remote attacker. So someone would still have to gain access to the system in question in the fi
by Osiris 5y ago
Not to completely minimize it, but that says local attacker, not remote attacker. So someone would still have to gain access to the system in question in the first place.
- phone8675309 5y agoJust because a server is headless does not mean that it isn't interactive in some way or running some user-submitted scripts or code. Also, compromising a service running as a user (not root) would be sufficient to then escalate.