4 ms·
With the root hash you can crack the root password using tools like John The Ripper[0]. More generally, I assume, this exploit can be used to read any arbitrary
by K0nserv 3y ago
With the root hash you can crack the root password using tools like John The Ripper[0]. More generally, I assume, this exploit can be used to read any arbitrary files on the system, bypassing regular access control, and plenty of other stuff you aren't supposed to be able to do as a non-privileged user.
0: https://www.openwall.com/john/ https://www.openwall.com/john/
- rsaxvc 3y agoIt seems like this would only allow reading memory resident for some other reason. Still bad, but I do not think it would allow directly reading files that weren't already in memory. As for /etc/shadow, it would be loaded any time someone attempts to login, and might even stick around in the page cache...