3 ms·

SUID binaries once again assisted a local privilege escalation attack. This is a major problem that distros can't keep ignoring.

• marshray 6mo ago
  There's a claim upthread that a straightforward variation works against /etc/passwd.
  • q3k 6mo ago
    You can also just use this to patch libc and turn close() into close-but-also-give-me-a-root-shell().