3 ms·
Aah, so sshd gets backdoored because systemd calls xz.
by brokenmachine 2y ago
Aah, so sshd gets backdoored because systemd calls xz.
- 1oooqooq 2y agono. anything in the dependency tree could call that lib. systemd is the first. systemd also provides libs to write things the exploit will use. but the important part you missed again is that the exploit is executed on symbols loading. it just choose to do just of the work when checking for a key. but after simply starting the code it's all lost already. nothing needs to call any code on libzma, just linking against it is enough to run the exploit.
- brokenmachine 2y agoCalls/links to. meh "important part you missed again" comes off as rude to me. Check yourself.
- 1oooqooq 2y agoit's actually the only interesting part of the exploit code. everything else is just very lame obfuscation